frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Pi 1.0

https://earendil.com/posts/pi-1-0/
701•sergiotapia•5h ago•237 comments

Clef: Open-weight decision models, and new RL fine-tuning platform

https://blog.cloudflare.com/clef-decision-models/
418•jasondavies•8h ago•157 comments

Several vulnerabilities have been discovered in the Linux kernel

https://lwn.net/Articles/1097401/
41•luispa•1h ago•12 comments

SvelteKit 3

https://svelte.dev/blog/sveltekit-3-is-here
96•sampsn•4h ago•33 comments

Ask HN: Who is hiring? (October 2026)

143•whoishiring•9h ago•148 comments

CSS Bed: Classless CSS themes to use as starting points in web development

https://www.cssbed.com
51•sea-gold•3h ago•10 comments

Show HN: Janus – Go binary that runs GGUF models via Vulkan on AMD/Intel/Nvidia

https://github.com/Vibra-Ingenn/Janus
46•Maverick617•4h ago•5 comments

StreetComplete on iOS is now in public beta

https://github.com/streetcomplete/StreetComplete/issues/5421
516•Snowly•13h ago•124 comments

Pi Durable

https://earendil.com/posts/pi-durable/
202•paulsmith•5h ago•22 comments

Using Opus 5.5 to discover a new eyewitness record of the dodo

https://resobscura.substack.com/p/using-opus-55-to-discover-a-new-eyewitness
48•benbreen•3h ago•3 comments

RIP, vector database

https://turbopuffer.com/blog/rip-vector-database
269•razin•8h ago•77 comments

Git 3.0's upcoming SHA-256 default will be a costly mistake

https://blog.gitbutler.com/git-3-sha-256
190•chmaynard•7h ago•211 comments

ArXiv's Updated Rate Limit Policy

https://blog.arxiv.org/2026/10/01/updated-rate-limit-policy/
63•50kIters•4h ago•22 comments

Oxygen-deprived underwater zones may not be “dead zones” but clue to early life

https://agupubs.onlinelibrary.wiley.com/doi/10.1029/2026AV002570
74•gumby•5h ago•3 comments

Automatic Transmission – a data-privacy study of connected vehicles

https://automatictransmission.khoury.northeastern.edu/index.html
138•rafaelc•4h ago•133 comments

Apple's smart home camera reportedly won't record video

https://www.theapplepost.com/2026/10/01/72882/apples-smart-home-camera-reportedly-wont-record-video/
9•mikelgan•1h ago•8 comments

Vote on which of Hacker News' challenges for AI have been met

https://stoppels.ch/goalposts/
79•stabbles•7h ago•85 comments

Aweb – Communication for AI Agents

https://aweb.ai
14•gurjeet•2h ago•8 comments

Various Projects Find Hidden SDR Capabilities in ESP32 Microcontrollers

https://www.rtl-sdr.com/various-projects-independently-find-hidden-sdr-capabilities-in-esp32-micr...
160•nkw•9h ago•26 comments

Cloudflare K2: serverless event streams

https://blog.cloudflare.com/cloudflare-k2-streams/
194•elffjs•10h ago•79 comments

Bez: Generating a browser engine from specs and tests

https://tangled.org/burrito.space/bez
85•nerdypepper•6h ago•33 comments

RacketCon Is Saturday

https://con.racket-lang.org/
124•spdegabrielle•9h ago•36 comments

Show HN: Open-source model routing for coding agents at Astra-level performance

78•adchurch•1d ago•21 comments

Butterflies use optical illusions to dodge predators

https://www.essex.ac.uk/news/2026/09/30/butterflies-use-optical-illusions-to-dodge-predators
8•gmays•1h ago•2 comments

Ask HN: Who wants to be hired? (October 2026)

87•whoishiring•9h ago•270 comments

Context Language Models

https://arxiv.org/abs/2609.37725
101•emersonmacro•9h ago•26 comments

Your Big Mac might cost more if McDonald's AI thinks people nearby can afford it

https://neow.in/NGxhb3d6
24•bundie•2h ago•16 comments

The death of web development education

https://molily.de/web-dev-education/
150•ibobev•3h ago•114 comments

How to speed up the Rust compiler in September 2026

https://nnethercote.github.io/2026/09/30/how-to-speed-up-the-rust-compiler-in-september-2026.html
230•trickypr•12h ago•115 comments

2026 International Utility Locate Rodeo

https://locaterodeo.net/
8•K7PJP•2h ago•0 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."