frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Show HN: HackerBooks – HackerTube, but for books recommended on HN

https://hackerbooks.org
35•roansh•29m ago•7 comments

HackerTube: YouTube built from videos recommended by HN

https://karpathy.bearblog.dev/hacker-tube/
1732•karpathy•20h ago•458 comments

Proving and improving the Platonic Representation Hypothesis with JEPAs

https://arxiv.org/abs/2610.39302
49•Anon84•3h ago•14 comments

Novellas with Groff

https://movq.de/blog/postings/2026-10-31/0/POSTING-en.html
42•dverlaeckt80•2h ago•13 comments

Police chief unplugs Flock cameras after company ignores contract cancellation

https://www.tomshardware.com/tech-industry/big-tech/police-chief-physically-unplugs-flock-cameras...
97•entryleveljobsc•1h ago•17 comments

Lenovo's 'encrypted' fingerprint USB is just an unencrypted SD card in a case

https://www.reddit.com/r/technology/comments/1xl2pr3/lenovos_encrypted_fingerprint_usb_drive_is_j...
112•entryleveljobsc•1h ago•48 comments

Bidirectional Charging During Grid Outages

https://www.jefftk.com/p/bidirectional-charging-during-grid-outages
17•luu•20h ago•11 comments

An Italian farmer found some unknown seeds in his attic and planted them

https://www.smithsonianmag.com/science-nature/italian-farmer-found-unknown-seeds-attic-with-nothi...
618•ecares•17h ago•176 comments

Show HN: I rebuilt my old canvas 3D library as a small WebGL 2 library – phoria2

https://kevs3d.co.uk/phoria2/
28•kevs3d•1d ago•3 comments

One-minute frequency disturbances from synchronization in power systems

https://www.nature.com/articles/s41560-026-02144-0
44•croes•1d ago•16 comments

Brazilian Court Sanctions Lawyers for Prompt Injection in Court Filing

https://jetstream.security/insights/brazilian-court-sanctions-prompt-injection-filing/
225•doodlesdev•14h ago•121 comments

Copper – A minimal low-level programming language with OOP and generics

https://tibleiz.net/copper/
13•bogdanoff_2•1d ago•6 comments

Memdoor: A team of 5 Qwen3.8-27B models beats Fable 5 on LiveCodeBench Hard

https://github.com/guregodevo/memdoor/tree/main/examples/workflows/team-solve
352•guregodevo•17h ago•173 comments

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
595•oger•21h ago•293 comments

Radiation Map of the World

https://radiaverse.com/
54•slater•3d ago•19 comments

AI agent swarms in Minecraft fail to build civilization, drown in bureaucracy

https://www.tomshardware.com/tech-industry/artificial-intelligence/ai-agent-swarms-unleashed-in-m...
65•entryleveljobsc•2h ago•24 comments

Show HN: Point your camera at a landscape to learn about its geology

https://outcrop.rocks/
79•headsupernova•3d ago•19 comments

Enlightenment 0.28.0 Release

https://www.enlightenment.org/news/2026-10-31-enlightenment-0.28.0
21•birdculture•1h ago•4 comments

Domain hacks with unusual Unicode characters (2018)

https://xn--69f31l4t57c0mag4b613h.xn--7uh4898msjaso/🆆🆃🅵/
36•n_plus_1_acc•5h ago•31 comments

Show HN: OmniDiff – Opensource, super fast, content aware Git difftool, in Rust

https://github.com/ivankovic/omnidiff
13•FabCH•3h ago•14 comments

Understanding Email Encryption

https://www.fastmail.com/blog/email-encryption/
71•nmjenkins•1d ago•19 comments

Leaking Secrets from Air-Gap Computers by Spelling Radio Signals from RAM (2024)

https://arxiv.org/abs/2409.02292
144•hapax_legomena•14h ago•72 comments

Running a bootstrapped SaaS for 20 years with my brother

https://blog.zamzar.com/2026/10/30/20-years-766-million-files-two-chameleons/
176•whyleyc•2d ago•43 comments

Restrooms along the Norwegian Scenic Routes

https://www.visitnorway.com/plan-your-trip/travel-tips-a-z/norwegian-scenic-routes/worlds-best-to...
599•giuliomagnifico•5h ago•344 comments

The AI cost of JavaScript frameworks

https://nolanlawson.com/2026/10/28/the-ai-cost-of-javascript-frameworks/
190•luu•10h ago•128 comments

Altoids Project

https://uvdn7.github.io/altoids-project/
143•uvdn7•17h ago•7 comments

Zinc creep in cable spelter sockets brought down the Arecibo telescope in 2020

https://maketecheasier.com/arecibo-zinc-creep-collapse/
146•ohjeez•1d ago•45 comments

A brief history of just-in-time: forty years of JIT work, from 1960–2000

https://dl.acm.org/doi/10.1145/857076.857077
59•gjvc•3d ago•1 comments

It's the memory latency, stupid

https://pivotlake.io/blog/its-the-memory-latency-stupid/
238•ntur1337•21h ago•76 comments

A 1580 Map Shows Why Data Visualization Is Never Neutral

https://thereader.mitpress.mit.edu/a-1580-map-shows-why-data-visualization-is-never-neutral/
71•the-mitr•2d ago•9 comments