frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Show HN: HackerBooks – HackerTube, but for books mentioned on HN

https://hackerbooks.org
1547•roansh•21h ago•251 comments

Postgres 19 is late because so many more bugs are being found now

http://rhaas.blogspot.com/2026/10/postgres-19-is-late-and-its-ais-fault.html
581•soheilpro•2d ago•352 comments

Show HN: Wikihack – HackerTube, but for Wikipedia articles mentioned on HN

https://wikihack.netlify.app
273•aizk•8h ago•77 comments

Show HN: I've updated my Linux System Call website and API

https://syscall.sh/
54•guitmz•3h ago•26 comments

HackerTube: YouTube built from videos recommended by HN

https://karpathy.bearblog.dev/hacker-tube/
2663•karpathy•1d ago•591 comments

Supermarket freezers across Europe hit by second suspected cyber-attack

https://www.theguardian.com/world/2026/nov/02/supermarket-freezers-across-europe-hit-by-second-su...
35•fergie•1h ago•32 comments

Bones may release proteins that slow aging and extend life span

https://www.science.org/content/article/bones-may-release-proteins-slow-aging-and-extend-life-span
152•EA-3167•11h ago•43 comments

F/OSS Comics #13: BSD Unix, Part 3 – The Beginning of BSD Unix

https://fosscomics.com/posts/13.%20BSD%20Unix%20Part%203%20-%20The%20Beginning%20of%20BSD%20Unix/
157•joonehur•11h ago•19 comments

Ask HN: Which TV do you recommend for privacy?

478•LecroJS•17h ago•607 comments

Show HN: HackerHack – HackerBooks but for Posts Posted on HN

https://news.ycombinator.com/
89•mw888•6h ago•16 comments

Mystery of 60-Second Fluctuations in Power Grids Solved

https://www.fz-juelich.de/en/news/archive/press-release/2026/mystery-of-60-second-fluctuations-in...
166•_Microft•2d ago•74 comments

Trigger.dev customer environment variables exposed

https://trigger.dev/blog/security-incident-nov-2026
114•anurag•11h ago•53 comments

The future in old computer magazines (1984–2004)

https://tomorrowasusual.substack.com/p/blast-from-the-past-the-future-in
30•tudell•1h ago•13 comments

From Charlemagne to the Kitchen Boy: Reading the Hamburg Rathaus

https://alsterrunde.com/from-charlemagne-to-the-kitchen-boy-reading-the-hamburg-rathaus/
46•mertbio•6h ago•6 comments

Never Complain, Never Explain

https://en.wikipedia.org/wiki/Never_complain,_never_explain
10•gregsadetsky•1h ago•2 comments

Private Jet plane crashes in Florida

https://www.cbc.ca/news/world/florida-plane-crash-9.7404996
15•hmokiguess•41m ago•15 comments

Nibnib: Image compression with extreme decompression speed

https://github.com/raphlinus/nibnib
157•raphlinus•3d ago•30 comments

Supermarket freezers in Belgium and Sweden hit by suspected cyber-attack

https://www.bbc.com/news/articles/cq1kd1nee80eo
57•xqcgrek2•1h ago•52 comments

Tips for more effective fuzz testing with AFL++

https://nullprogram.com/blog/2025/02/05/
131•luu•5d ago•25 comments

China's First Frontier AI Export Controls: Mofcom Announcement No. 48

https://labs.cloudsecurityalliance.org/research/csa-research-note-china-ai-export-controls-announ...
76•jonnybgood•5h ago•46 comments

Copper – A minimal low-level programming language with OOP and generics

https://tibleiz.net/copper/
182•bogdanoff_2•2d ago•99 comments

The AI cost of JavaScript frameworks

https://nolanlawson.com/2026/10/28/the-ai-cost-of-javascript-frameworks/
396•luu•1d ago•304 comments

Show HN: OmniDiff – Opensource, super fast, content aware Git difftool, in Rust

https://github.com/ivankovic/omnidiff
269•FabCH•1d ago•78 comments

New 3D thermal invisibility cloak makes objects disappear from infrared cameras

https://www.sciencedaily.com/releases/2026/10/261025073051.htm
91•stevenalowe•3d ago•38 comments

OccupySaaS

https://occupysaas.com/
356•misswaterfairy•12h ago•217 comments

BioWare co-founder: game execs "have never made a game" and don't get it

https://www.pcgamer.com/gaming-industry/none-of-these-people-have-ever-made-a-game-bioware-co-fou...
24•entryleveljobsc•4h ago•4 comments

Proving and improving the Platonic Representation Hypothesis with JEPAs

https://arxiv.org/abs/2610.39302
147•Anon84•23h ago•74 comments

Show HN: Point your camera at a landscape to learn about its geology

https://outcrop.rocks/
221•headsupernova•3d ago•47 comments

One-minute frequency disturbances from synchronization in power systems

https://www.nature.com/articles/s41560-026-02144-0
166•croes•2d ago•54 comments

Mathematics has changed. Let's act like it

https://terrytao.wordpress.com/2026/11/01/mathematics-has-changed-lets-act-like-it/
334•smilelamp•18h ago•414 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."