frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

CBP tapped into the online advertising ecosystem to track peoples’ movements

https://www.404media.co/cbp-tapped-into-the-online-advertising-ecosystem-to-track-peoples-movements/
304•ece•1d ago•134 comments

Where things stand with the Department of War

https://www.anthropic.com/news/where-stand-department-war
127•surprisetalk•1h ago•74 comments

GPT-5.4

https://openai.com/index/introducing-gpt-5-4/
629•mudkipdev•7h ago•549 comments

The next generations of Bubble Tea, Lip Gloss, and Bubbles are available now

https://charm.land/blog/v2/
82•atkrad•2h ago•22 comments

A standard protocol to handle and discard low-effort, AI-Generated pull requests

https://406.fail/
83•Muhammad523•3h ago•21 comments

The Brand Age

https://paulgraham.com/brandage.html
216•bigwheels•8h ago•194 comments

10% of Firefox crashes are caused by bitflips

https://mas.to/@gabrielesvelto/116171750653898304
261•marvinborner•1d ago•150 comments

Good software knows when to stop

https://ogirardot.writizzy.com/p/good-software-knows-when-to-stop
335•ssaboum•11h ago•186 comments

Wikipedia was in read-only mode following mass admin account compromise

https://www.wikimediastatus.net
872•greyface-•9h ago•308 comments

Hardware hotplug events on Linux, the gory details

https://arcanenibble.github.io/hardware-hotplug-events-on-linux-the-gory-details.html
117•todsacerdoti•3d ago•5 comments

A ternary plot of citrus geneology

https://www.jlauf.com/writing/citrus/
86•jlauf•2d ago•9 comments

A GitHub Issue Title Compromised 4k Developer Machines

https://grith.ai/blog/clinejection-when-your-ai-tool-installs-another
313•edf13•9h ago•70 comments

Show HN: Jido 2.0, Elixir Agent Framework

https://jido.run/blog/jido-2-0-is-here
248•mikehostetler•9h ago•53 comments

Remotely unlocking an encrypted hard disk

https://jyn.dev/remotely-unlocking-an-encrypted-hard-disk/
81•janandonly•7h ago•49 comments

GLiNER2: Unified Schema-Based Information Extraction

https://github.com/fastino-ai/GLiNER2
40•apwheele•5h ago•3 comments

Structured AI (YC F25) Is Hiring

https://www.ycombinator.com/companies/structured-ai/jobs/3cQY6Cu-mechanical-design-engineer-found...
1•issygreenslade•4h ago

Judge orders government to begin refunding more than $130B in tariffs

https://www.wsj.com/politics/policy/judge-orders-government-to-begin-refunding-more-than-130-bill...
791•JumpCrisscross•11h ago•591 comments

OpenTitan Shipping in Production

https://opensource.googleblog.com/2026/03/opentitan-shipping-in-production.html
83•rayhaanj•6h ago•10 comments

Proton Mail Helped FBI Unmask Anonymous 'Stop Cop City' Protester

https://www.404media.co/proton-mail-helped-fbi-unmask-anonymous-stop-cop-city-protestor/
196•sedatk•4h ago•97 comments

Converting dash cam videos into Panoramax images

https://www.openstreetmap.org/user/FeetAndInches/diary/408268
29•marklit•3d ago•6 comments

Let's Get Physical

https://m4iler.cloud/posts/lets-get-physical/
101•MBCook•6h ago•15 comments

Launch HN: Vela (YC W26) – AI for complex scheduling

35•Gobhanu•8h ago•37 comments

Ethiopia gets $350M World Bank financing for its digital ID project (2024)

https://www.mariblock.com/stories/ethiopia-to-get-350-million-world-bank-financing-for-its-digita...
26•tinfoilhatter•4h ago•18 comments

Optimizing Recommendation Systems with JDK's Vector API

https://netflixtechblog.com/optimizing-recommendation-systems-with-jdks-vector-api-30d2830401ec
65•mariuz•2d ago•4 comments

Datasets for Reconstructing Visual Perception from Brain Data

https://github.com/seelikat/neuro-visual-reconstruction-dataset-index
50•katsee•9h ago•11 comments

Greg Kroah-Hartman Stretches Support Periods for Key Linux LTS Kernels

https://fossforce.com/2026/03/greg-kroah-hartman-stretches-support-periods-for-key-linux-lts-kern...
65•brideoflinux•3d ago•21 comments

World-first gigabit laser link between aircraft and geostationary satellite

https://www.esa.int/Applications/Connectivity_and_Secure_Communications/World-first_gigabit-per-s...
167•giuliomagnifico•4d ago•65 comments

Show HN: Kanon 2 Enricher – the first hierarchical graphitization model

https://isaacus.com/blog/kanon-2-enricher
7•ubutler•2d ago•2 comments

A man who broke into jail

https://www.newyorker.com/magazine/2026/03/09/alexander-friedmann-profile-prison-reform
108•fortran77•2d ago•50 comments

Show HN: PageAgent, A GUI agent that lives inside your web app

https://alibaba.github.io/page-agent/
74•simon_luv_pho•8h ago•37 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•9mo ago

Comments

steele•9mo ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•9mo ago
Lmao, gentrify cracked me up
neilv•9mo ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•9mo ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•9mo ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•9mo ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•9mo ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•9mo ago
May as well just release an executable tbh.
theamk•9mo ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•9mo ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•9mo ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."