frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Iosevka is an open-source, sans-serif and slab-serif, monospace font

https://typeof.net/Iosevka/
35•otobrglez•1h ago•10 comments

Gemini 4 Argon

https://deepmind.google/models/gemini/
1299•737max•17h ago•907 comments

Sound – Bartosz Ciechanowski (2022)

https://ciechanow.ski/sound/
120•dverlaeckt80•2d ago•18 comments

Ledger confirms spy chip implant behind wallet crypto thefts

https://www.bleepingcomputer.com/news/security/ledger-confirms-hardware-wallet-spy-implant-behind...
688•thm•1d ago•440 comments

AOSP Source Releases Are So Late Developers Disassemble Libraries to Report Bugs

https://github.com/android/ndk/issues/2260
240•tharen•3h ago•113 comments

Show HN: Guitoro, a virtual guitar you strum with your keyboard

https://guitoro.com/
431•talccc•14h ago•110 comments

Redesigning source control at Anthropic

https://www.anthropic.com/engineering/redesigning-source-control
770•Philpax•17h ago•767 comments

Grace Hopper Celebration Cancelled

https://anitab.org/press-release
191•mooreds•10h ago•111 comments

900-Page Pre-Pantone Guide to Color from 1692 (With Complete High-Res Scan)

https://www.openculture.com/2026/10/a-900-page-pre-pantone-guide-to-color-from-1692.html
163•mdp2021•2d ago•21 comments

Felix Rieseberg Homepage

https://felixrieseberg.com/
185•rglover•4h ago•76 comments

What agents mean for Rust (and vice versa)

https://smallcultfollowing.com/babysteps/blog/2026/10/14/agentic-dev-and-rust/
4•mfrw•53m ago•0 comments

Same Job, Two Engines: InnoDB and Iceberg Internals

https://marcpaul.io/logs/same-job-two-engines-innodb-and-iceberg-internals/
8•marcbpaul•20h ago•0 comments

The United Kingdom generates less electricity per person than in the 1970s

https://ourworldindata.org/data-insights/electricity-generation-per-person-in-the-united-kingdom-...
311•karakoram•18h ago•471 comments

Recreational Programming

https://www.cphiri.dev/presentations/recreational-programming
187•jslakro•11h ago•76 comments

Kcgi – minimal CGI and FastCGI library for C/C++

https://kristaps.bsd.lv/kcgi/
25•Bluestein•1d ago•14 comments

Arena Allocators in C

https://eliasebner.com/blog/guides/arena-allocators-in-c/
41•dimonomid•2d ago•11 comments

Show HN: How random are you?

https://lab.specr.net/rigged-draw/
147•vunderba•16h ago•75 comments

MIT class project turns into an FDA-cleared treatment for tremors

https://news.mit.edu/2026/mit-class-project-turns-into-fda-cleared-treatment-for-tremors-1002
212•zdw•1d ago•42 comments

Maybe a better way to track the release history of a Git repo

https://blog.plover.com/prog/git/history-proposal.html
41•evakhoury•1d ago•8 comments

Strafe: A new open-source, E2E Encrypted, and federated alternative to Discord

https://strafe.chat/
18•brydencalaway•6h ago•6 comments

AlphaNIST

https://alpha-nist.github.io/
75•jasonjmcghee•11h ago•24 comments

Apple HomeView

https://www.apple.com/apple-homeview/
727•etothet•20h ago•850 comments

OpenAI engineer arrested in bugging of executive conference room

https://sfstandard.com/2026/10/13/openai-engineer-arrested-alleged-bugging-executive-conference-r...
582•forthwall•13h ago•480 comments

AI is a tool and using it well takes skill

https://yyhh.org/blog/2026/10/ai-is-a-tool/
685•layer8•1d ago•541 comments

PostEra (YC W20) Is Hiring AI Researchers for Drug Discovery

https://jobs.lever.co/postera/c7d50a36-db0a-4574-bfe4-8700b74a22c0
1•morraa•12h ago

Starlink limit hits Ukraine's drones. The battlefield depends on SpaceX

https://defence24.com/geopolitics/starlink-limit-hits-ukraines-drones-the-battlefield-depends-on-...
6•uxhacker•31m ago•0 comments

Show HN: XY Music Notation

https://music.xy.dev/
72•jmole•15h ago•62 comments

11 year old unsoundness bugs found in Rust borrow checker

https://github.com/rust-lang/rust/issues/164250
721•formerly_proven•23h ago•402 comments

Hiking the world in search of rare cheeses

https://www.bbc.com/travel/article/20261007-the-man-hiking-the-world-in-search-of-rare-cheeses
96•tosh•1d ago•29 comments

Thunderbird for iOS

https://blog.thunderbird.net/2026/10/thunderbird-for-ios-a-first-look-at-the-native-iphone-email-...
437•mjorgers•18h ago•185 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."