frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

"They had no concept of a duty of care to their users."

https://unsung.aresluna.org/they-had-no-concept-of-a-duty-of-care-to-their-users/
62•jandeboevrie•41m ago•10 comments

In an $80 Motel Room, a Discovery to Shed Light on the Origins of Life

https://www.nytimes.com/2026/09/26/science/motel-science-discovery.html
36•danso•55m ago•10 comments

Replacing the old battery on rechargeable bike lights

https://jvns.ca/blog/2026/09/27/replacing-the-old-battery-on-rechargeable-bike-lights/
41•surprisetalk•1h ago•11 comments

Flip Fluid on Flip Dots

https://mitxela.com/projects/flipflip
246•blutack•1d ago•16 comments

Fakecloud: Local AWS cloud emulator for integration tests

https://fakecloud.dev/
32•theanonymousone•1d ago•13 comments

Font where each token is equal-width

https://twitter.com/amplifiedamp/status/2103535129503383700
3•ampdot•22h ago•0 comments

Unsealed Briefs in Authors’ Case v. Microsoft/OpenAI

https://authorsguild.org/news/ag-v-openai-top-execs-knew-mass-book-piracy-was-illegal/
525•papergirl•9h ago•442 comments

Writing Efficient C++ Code

https://asawicki.info/articles/writing_efficient_cpp_code.php
5•ibobev•1d ago•1 comments

Does Georgism work? Five years later

https://www.astralcodexten.com/p/does-georgism-work-five-years-later
448•silveraxe93•2d ago•340 comments

10 Tells of a Slop UI

https://hereticpleb.vercel.app/blog/10-tells-of-slop
89•theanonymousone•45m ago•58 comments

Go Concurrency Distilled

https://antonz.org/go-concurrency-distilled/
300•chmaynard•1d ago•131 comments

Finally, A True Blue Rose Exists

https://www.sciencenews.org/article/true-blue-rose-pigment-copigment
59•bookofjoe•1d ago•22 comments

PipePipe: NewPipe hard fork implementing SponsorBlock

https://github.com/InfinityLoop1308/PipePipe
462•Qision•2d ago•249 comments

Show HN: A CC0 museum of retro 3D tricks you can paste into a page

https://3d-retro.com/
17•SouthWestAtlas•3d ago•3 comments

Rusty thoughts on "Parse, don't validate"

https://eli.thegreenplace.net/2026/rusty-thoughts-on-parse-dont-validate/
32•ingve•6h ago•7 comments

Ten Lines of Code That Changed My World

https://pixelambacht.nl/2026/ten-lines-of-code/
5•dimonomid•1h ago•0 comments

The internet discovers TLA+. Now what?

https://reasonable.io/blog/tla-tutorial/
74•matt_d•10h ago•35 comments

"As a Language Model": Chat Template Switches LLM Self-Referential Voice

https://arxiv.org/abs/2609.25021
81•yu3zhou4•5h ago•84 comments

DeepSeek Elastic Compute (DSec)

https://arxiv.org/abs/2609.22978
298•shenli3514•21h ago•94 comments

Show HN: Reladraw – A diagram language where you decide where to place things

https://github.com/reladraw/reladraw
355•jpwalsh234•22h ago•93 comments

ASML says it sold 'absolutely nothing' in Europe in 2026

https://www.tomshardware.com/tech-industry/semiconductors/asml-says-its-sells-absolutely-nothing-...
358•MC995•2d ago•771 comments

Biology might not be quantum, but its math is quantumlike

https://www.quantamagazine.org/biology-might-not-be-quantum-but-its-math-is-quantumlike-20260923/
101•pseudolus•2d ago•37 comments

A searchable library of forgotten public-domain film clips from 1915 onward

https://www.movingimagearchive.com/
195•momentmaker•2d ago•26 comments

Fifteen years later, the Apple Cards origin story

https://lexontech.org/fifteen-years-later-the-apple-cards-origin-story
419•ksec•1d ago•109 comments

How I changed teaching after AI managed to do all my homework assignments

https://thelastsoftwareengineer.substack.com/p/how-i-changed-teaching-after-ai-managed
260•azhenley•2d ago•243 comments

Exploding variance of means of exponentials: least-squares to the rescue

https://francisbach.com/spectral_log_density_estimation/
53•matt_d•1d ago•0 comments

An agent used DNS to reach an external chatbot

https://alignment.openai.com/misalignment-reports/an-agent-used-dns-to-reach-an-external-chatbot/
135•apsec112•1d ago•135 comments

Promising discoveries about the potential for life on one of Saturn’s icy moons

https://www.fu-berlin.de/en/presse/informationen/fup/2026/fup_26_116-enceladus-cassini-mikroben-s...
86•geox•1d ago•48 comments

Drawgent: Coding agent on a live Excalidraw canvas

https://tangled.org/yanndegat.tngl.sh/drawgent
169•parasitid•23h ago•44 comments

How to keep enjoying programming in a world of LLMs

https://discourse.haskell.org/t/how-to-keep-enjoying-programming-in-a-world-of-llms/14705
291•signa11•1d ago•307 comments