frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

GitHub Down Again?

https://github.com/torvalds/linux
42•ridowk•32m ago•27 comments

Agent memory needs its OpenTelemetry moment

https://www.lorekit.io/blog/open-agent-memory-format
26•mthines•1h ago•13 comments

Goodbye Claude, Hello Pi

https://caleb.software/posts/claude-to-pi.html
320•karagenit•7h ago•192 comments

Clj.rs – a Clojure dialect implemented in Rust

https://clj.rs/
58•simonpure•3d ago•4 comments

What I run on my $10 USD OpenStick homelab

https://blog.bosscher.ch/posts/openstick/
589•LaurensBER•16h ago•110 comments

Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files

https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again
398•shmulc•13h ago•273 comments

Kirlian Photography: Building Your Own Equipment

https://imagesco.com/articles/kirlian/kirlian-photography.html
50•joebig•6h ago•8 comments

Finding Xanadu: Inside a JRPG classic translation 15 years in the making

https://readonlymemo.com/legend-of-xanadu-pc-engine-fan-translation-interview-making-of/
18•speckx•2d ago•0 comments

Making any integer with four 2s (2025)

https://eli.thegreenplace.net/2025/making-any-integer-with-four-2s/
146•germanrabbit•11h ago•33 comments

Need for Speed Underground 2 online in the browser

https://nfsu2.xyz/
996•fluxusars•1d ago•250 comments

WaveDudeNext 2D Wave Simulator

https://github.com/graealex/WaveDudeNext
11•sweetdingoes•3h ago•3 comments

Consumer brain wave headsets threaten privacy

https://www.science.org/content/article/wearable-device-makers-are-harvesting-brain-data-train-ai...
52•maxall4•8h ago•21 comments

Uranium cubes reveal why the German nuclear project failed

https://arstechnica.com/science/2026/11/uranium-cubes-reveal-why-the-german-nuclear-project-failed/
139•rbanffy•2d ago•91 comments

GitHub New pull request overview page in public preview

https://github.blog/changelog/2026-11-05-new-pull-request-overview-page-in-public-preview/
144•xiaoyu2006•11h ago•94 comments

MaxxBench – "Nice DeepSWE score. But is it true?"

https://maxxbench.unlap.ai/research/why-maxxbench/
313•antiuniverse•17h ago•83 comments

ISponsorBlockTV: SponsorBlock client for all YouTube TV clients

https://github.com/dmunozv04/isponsorblocktv
41•xnx•6h ago•10 comments

New typeface using intricate designs from Shakespeare's First Folio (2023)

https://www.itsnicethat.com/news/typeland-shakespeares-globe-amifer-folio-graphic-design-090323
4•bryanrasmussen•3d ago•1 comments

ZapFast: A fast, native WhatsApp client in Rust and egui

https://github.com/crmne/zapfast
77•handfuloflight•8h ago•48 comments

Every Mac comes with an (undocumented) family member classifier

https://8rank.ai/game/apple-intelligence-personal-knowledge-graph
733•infwhispers•1d ago•385 comments

I'm Rewriting IBM SPSS Statistics in 100% Safe Rust, Alone

https://github.com/kobaltgit/StatCraft
5•kobaltGIT•1h ago•0 comments

Amsterdam School

https://architecture-history.org/schools/AMSTERDAM%20SCHOOL.html
44•bondarchuk•4d ago•8 comments

Every Windows 11 app should kill Electron, and Discord just showed why

https://www.windowslatest.com/2026/11/06/every-windows-11-app-should-kill-electron-and-discord-ju...
331•thunderbong•23h ago•306 comments

Show HN: Coldframe, a honeypot that poses as a supermarket fridge controller

https://github.com/hedgerow-dev/coldframe
240•hedgerow-dev•17h ago•59 comments

The end of Microsoft Research's AI Frontiers group

https://hunch.net/?p=13764006
458•srean•16h ago•277 comments

Commodore PET – The Worlds First Personal Computer

https://www.commodore.ca/commodore-products/commodore-pet-the-worlds-first-personal-computer/
57•andsoitis•11h ago•19 comments

Apple’s grey list: Words and phrases your iPhone won’t help you spell

https://www.theguardian.com/technology/2026/nov/06/struggling-to-spell-male-chauvinist-pig-apple-...
468•user_7832•17h ago•295 comments

The $8 Linux Computer (2022)

http://thelittleengineerthatcould.blogspot.com/2022/12/the-8-linux-computer.html
238•zenincognito•20h ago•92 comments

Every processor die anyone has photographed and given away

https://sheets.works/data-viz/cpu-dies
127•user_7832•18h ago•25 comments

Asahi Linux Progress Linux 7.3

https://asahilinux.org/2026/11/progress-report-7-3/
381•ackyshake•1d ago•331 comments

A barbarian tribe's mythic origin story is true, ancient DNA reveals

https://www.science.org/content/article/barbarian-tribe-s-mythic-origin-story-true-ancient-dna-re...
239•benbreen•1d ago•213 comments