frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Linux from Scratch

https://www.linuxfromscratch.org/
33•sippingabonedry•1h ago•10 comments

iOS 27, iPadOS 27, and macOS 27

https://www.apple.com/newsroom/2026/09/major-updates-for-apples-software-platforms-are-now-availa...
512•throw0101d•12h ago•554 comments

OpenArm: An open-source 7DOF humanoid arm

https://github.com/enactic/OpenArm
25•Lwrless•1d ago•1 comments

4,400-Year-Old Tomb of Egyptian Judge Found at Saqqara with Colors on Walls

https://arkeonews.net/4400-year-old-tomb-of-an-egyptian-judge-found-at-saqqara-with-colors-still-...
88•arunbahl•2d ago•17 comments

Pion, an agent designed to run any company autonomously

https://andonlabs.com/blog/why-we-built-pion
356•lukaspetersson•12h ago•400 comments

Every invoice in Brazil's economy runs on SOAP 1.2. We mapped it all

https://github.com/stoix-dev/sefaz-webservices-postman
49•lestx•2d ago•30 comments

Charts built for Chat

https://dbtcharts.com/blog/charts-built-for-chat/
180•thingsilearned•8h ago•56 comments

Dropping eBPF CPU Cost by About 90% with Memoization (Not AI Gen)

https://nathannaveen.dev/posts/dropping-ebpf-cpu-cost-by-90/
83•nathannaveen•15h ago•23 comments

XCancel service is suspended until further notice

https://xcancel.com/#
555•gaganyaan•20h ago•831 comments

Show HN: Macros with a Behringer FCB1010 MIDI Pedalboard in macOS

https://github.com/JamesRyanATX/fcbnerd
54•fretlessjazz•6h ago•10 comments

OpenAI bots knew about the RubyGems caching vulnerability

https://tenderlovemaking.com/2026/09/11/what-a-time-to-be-alive/
421•gregnavis•17h ago•341 comments

Compressing a Flag to 11 Bits

https://read.vantezzen.io/miniflags
108•bennett_dev•2d ago•45 comments

Distributed Systems Classics (2017)

https://nvartolomei.com/dist-sys-classics/
267•grep_it•13h ago•59 comments

Principles for Fast Tokio Applications

https://dial9-rs.github.io/blog/principles-for-fast-tokio-applications/
190•carllerche•14h ago•46 comments

Show HN: Redis City – Explore how Redis works in an interactive 3D model

https://poltora.dev/redis
31•poltora•2d ago•5 comments

Ask HN: What are you working on? (September 2026)

315•david927•1d ago•979 comments

Steam Frame starts at $1059

https://store.steampowered.com/hardware/steamframe
609•bsimpson•12h ago•455 comments

The biggest dinosaurs couldn't sit on their eggs

https://www.cbc.ca/news/science/titanosaur-eggs-9.7336841
33•BiraIgnacio•1d ago•11 comments

How my e-reader lost its stripes

https://www.serpentine.com/posts/2026/x3-stripes/
181•simonmic•13h ago•28 comments

Ubuntu 26.10 completes transition to Rust-based coreutils

https://www.omgubuntu.co.uk/2026/09/ubuntu-2610-rust-coreutils-complete
137•theanonymousone•16h ago•110 comments

People who can't picture anything are rewriting the science of imagination

https://dailyneuron.com/aphantasia-mental-imagery-brain-network/
138•giuliomagnifico•16h ago•201 comments

When code is a maze, smart developers make maps

https://medium.com/@simonsmartiom/when-code-is-a-maze-smart-developers-make-maps-fbc452a48c1b
4•boxesnlines•21h ago•0 comments

Cloudflare AKE cuts origin HelloRetryRequests from 52% to 3.7%

https://blog.cloudflare.com/automatic-key-exchange-for-origins/
102•iamsyr•12h ago•28 comments

Backprop Alternative: Augmented Lagrangian Predictive Coding

https://pub.sakana.ai/pc-alm/
72•guld•11h ago•17 comments

Optimizing a Spin-Lock

https://david.alvarezrosa.com/posts/optimizing-a-spin-lock/
56•signa11•2d ago•28 comments

A Beginning for Mathematics

https://www.daniellitt.com/blog/2026/9/13/a-beginning-for-mathematics/
189•robinhouston•14h ago•108 comments

Why don't machine learning research agents overfit?

https://www.amazon.science/blog/why-dont-machine-learning-research-agents-overfit
119•Betelbuddy•13h ago•66 comments

Ex-FTC boss Khan: break out the handcuffs for AI CEOs, citing 1934 precedent

https://www.theregister.com/ai-and-ml/2026/09/14/ex-ftc-boss-khan-urges-uncle-sam-to-break-out-th...
116•throwworhtthrow•5h ago•57 comments

Amazon vs. Perplexity – U.S. Court of Appeals for the Ninth Circuit

https://law.justia.com/cases/federal/appellate-courts/ca9/26-1444/26-1444-2026-08-04.html
198•neom•8h ago•198 comments

Dario, Please

https://pop.rdi.sh/dario-please/
408•0x5FC3•15h ago•195 comments