frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Does Georgism work? Five years later

https://www.astralcodexten.com/p/does-georgism-work-five-years-later
259•silveraxe93•1d ago•169 comments

Go Concurrency Distilled

https://antonz.org/go-concurrency-distilled/
173•chmaynard•16h ago•53 comments

PipePipe: NewPipe hard fork implementing SponsorBlock

https://github.com/InfinityLoop1308/PipePipe
385•Qision•1d ago•210 comments

DeepSeek Elastic Compute (DSec)

https://arxiv.org/abs/2609.22978
231•shenli3514•12h ago•77 comments

Show HN: Reladraw – A diagram language where you decide where to place things

https://github.com/reladraw/reladraw
271•jpwalsh234•13h ago•78 comments

Improving site performance by shipping more CSS

https://github.blog/engineering/architecture-optimization/improving-site-performance-by-shipping-...
20•torutofu•17h ago•5 comments

Flip Fluid on Flip Dots

https://mitxela.com/projects/flipflip
16•blutack•23h ago•2 comments

What is the size of Yemen? (2024)

https://theborys.substack.com/p/what-is-the-size-of-yemen
117•kspacewalk2•4h ago•19 comments

A searchable library of forgotten public-domain film clips from 1915 onward

https://www.movingimagearchive.com/
154•momentmaker•2d ago•26 comments

An agent used DNS to reach an external chatbot

https://alignment.openai.com/misalignment-reports/an-agent-used-dns-to-reach-an-external-chatbot/
74•apsec112•1d ago•75 comments

Reverse-engineering the Intel 8087's tangent algorithm: more than CORDIC

https://www.righto.com/2026/09/8087-tangent-cordic.html
69•pwg•13h ago•9 comments

Evolving programming languages in the AI era

https://dashbit.co/blog/evolving-ai-era
80•pjm331•2d ago•48 comments

Drawgent: Coding agent on a live Excalidraw canvas

https://tangled.org/yanndegat.tngl.sh/drawgent
141•parasitid•15h ago•39 comments

Fifteen years later, the Apple Cards origin story

https://lexontech.org/fifteen-years-later-the-apple-cards-origin-story
385•ksec•21h ago•95 comments

ASML says it sold 'absolutely nothing' in Europe in 2026

https://www.tomshardware.com/tech-industry/semiconductors/asml-says-its-sells-absolutely-nothing-...
236•MC995•1d ago•569 comments

Biology might not be quantum, but its math is quantumlike

https://www.quantamagazine.org/biology-might-not-be-quantum-but-its-math-is-quantumlike-20260923/
51•pseudolus•2d ago•19 comments

Snap Wants to be a State Actor??–Kansas v. Snap

https://blog.ericgoldman.org/archives/2026/09/snap-wants-to-be-a-state-actor-kansas-v-snap.htm
42•hn_acker•1d ago•10 comments

Turning GLM-5.3-Flash into a Jev-like decision model

https://www.privatemode.ai/blog/system-one-from-glm-flash
82•flxflx•15h ago•29 comments

Exploding variance of means of exponentials: least-squares to the rescue

https://francisbach.com/spectral_log_density_estimation/
20•matt_d•1d ago•0 comments

We Should Be Able to Change Our Languages

http://jimmyhmiller.com/change-our-languages
40•surprisetalk•1d ago•16 comments

How I changed teaching after AI managed to do all my homework assignments

https://thelastsoftwareengineer.substack.com/p/how-i-changed-teaching-after-ai-managed
183•azhenley•2d ago•166 comments

Promising discoveries about the potential for life on one of Saturn’s icy moons

https://www.fu-berlin.de/en/presse/informationen/fup/2026/fup_26_116-enceladus-cassini-mikroben-s...
45•geox•1d ago•24 comments

How to keep enjoying programming in a world of LLMs

https://discourse.haskell.org/t/how-to-keep-enjoying-programming-in-a-world-of-llms/14705
208•signa11•21h ago•251 comments

Modern Object Pascal Introduction for Programmers

https://castle-engine.io/modern_pascal
167•birdculture•2d ago•67 comments

Real-time feedback: My closing move in every interview

https://mgrebler.substack.com/p/real-time-feedback-my-closing-move
26•fagnerbrack•6h ago•22 comments

Generate fonts where every LLM token is the same width

https://ampdot.mesh.host/token-space-fonts.html
51•z-mach9•1d ago•12 comments

Welcome to the Medical Clinic at the Interplanetary Relay Station

https://www.lightspeedmagazine.com/fiction/welcome-to-the-medical-clinic-at-the-interplanetary-re...
64•bucket2015•11h ago•12 comments

The Evolution of Vending Machines

https://www.saturdayeveningpost.com/2026/09/from-holy-water-to-frozen-meals-the-evolution-of-vend...
31•ohjeez•14h ago•9 comments

LA Metro has some of the slowest escalators

https://basin.la/articles/ninety-feet-a-minute.html
98•big_toast•2d ago•79 comments

The Lost Atomic Update on Loongson CPU

https://jia.je/hardware/2026/09/24/loongson-cpu-erratum-en/
120•jiegec•2d ago•6 comments