frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

https://blog.laserphile.com/2026/08/aliexpress-webpage-keeping-multipoint.html
438•emctech•5h ago•145 comments

Malicious Rust crate Arrayref runs a build-time payload

https://safedep.io/arrayref-proc-macro1-rust-build-time-malware/
180•abhisek•2h ago•135 comments

Show HN: I trained a 125M model to autocomplete piano on-device

https://simedw.com/2026/08/20/midi-autocomplete/
223•simedw•3h ago•55 comments

DiffusionGemma Technical Report

https://arxiv.org/abs/2608.00146
50•gmays•2h ago•8 comments

Hacking with Claude on a $27 Smart Watch

https://www.mikekasberg.com/blog/2026/08/19/hacking-with-claude-on-a-27-smart-watch.html
27•speckx•1h ago•12 comments

HTML Can Do That

https://chrisburnell.com/html-can-do-that/
76•encyclopedism•1d ago•7 comments

CIA funding helped keep NeXT afloat in the 80s

https://www.wsj.com/tech/steve-jobs-apple-next-cia-161b65f9?st=NWWds1&reflink=desktopwebshare_per...
41•EwanG•15h ago•12 comments

An elliptic curve of rank ≥ 30

https://elliptic-rank.icarm.cloud/curve/273
21•robinhouston•1h ago•7 comments

Every Model Cheats

https://dreadnode.io/research/every-model-cheats-prompt-level-mitigation-of-cheating-on-offensive...
14•vga805•1h ago•3 comments

Mojo is now open source

https://www.modular.com/blog/mojo-open-source
183•visheshdembla•1d ago•50 comments

Windows brings out the Rorschach test in everyone (2003)

https://devblogs.microsoft.com/oldnewthing/20030825-00/?p=42803
299•luu•9h ago•106 comments

I like 'em thick: an apology to my English teachers

https://www.experimental-history.com/p/i-like-em-thick
6•Ariarule•1d ago•0 comments

Proof of Human (YC S23) Is Hiring a Member of Technical Staff

https://www.ycombinator.com/companies/proof-of-human/jobs/ZTZHEbb-member-of-technical-staff
1•timshell•3h ago

Git at any scale

https://cursor.com/blog/git-at-any-scale
75•meetpateltech•1d ago•6 comments

Why the Ocean Cleanup hasn't solved the plastic pollution crisis

https://therevelator.org/why-ocean-cleanup-has-not-solved-plastic-pollution/
36•sohkamyung•2h ago•28 comments

Xorg-Server 26.0.99.901

https://lists.x.org/archives/xorg-announce/2026-August/003741.html
26•st_goliath•2h ago•3 comments

Nearly 1,400 live streams from Japan

https://tomarigi.me/
34•pajop•2d ago•7 comments

Double-double: 31 digits of precision without leaving the FPU

https://marekfiser.com/blog/double-double-arithmetic/
6•iliketrains•3d ago•0 comments

An American Mosaic (interactive map of ancestry census data)

https://www.nytimes.com/interactive/2026/07/01/us/america-ancestry-census-data-map.html
21•cckolon•3d ago•3 comments

Theory of Fluids Enters the 21st Century

https://www.quantamagazine.org/theory-of-fluids-enters-the-21st-century-20260817/
35•librasteve•2d ago•2 comments

Bun 1.4

https://bun.com/blog/bun-v1.4
82•meetpateltech•1h ago•32 comments

Stop Anthropomorphizing Intermediate Tokens as Reasoning/Thinking Traces

https://arxiv.org/abs/2504.09762
94•nunodonato•1d ago•21 comments

Seeing beyond BMI: Estimating cardiometabolic risk with smartphone imagery

https://research.google/blog/seeing-beyond-bmi-estimating-cardiometabolic-risk-with-smartphone-im...
42•leanderjanssen•4h ago•18 comments

Risk Engineering

https://risk-engineering.org/
52•throwaw12•5h ago•7 comments

Show HN: Open-source Stripe Connect alternative

https://zoneless.com
12•tinyprojects•54m ago•3 comments

Show HN: Check if any of the $656M in unclaimed royalties at The MLC is yours

https://pub.doub.ly/
8•knaught•54m ago•0 comments

Stwipe Acquires OpenWouter

https://stwipe.com/
126•eatonphil•1h ago•17 comments

Turns are Better than Radians (2022)

https://www.computerenhance.com/p/turns-are-better-than-radians
303•mayoff•14h ago•161 comments

Router by Ramp

https://router.com
89•zackfield•20h ago•55 comments

CI jobs artifacts should not be difficult

https://deadsimpleci.sparrowhub.io/doc/job-artifacts
13•melezhik•1h ago•7 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."