frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

GPT-6 Astra

https://openai.com/index/gpt-6-astra/
1426•kibae•8h ago•1176 comments

.name Termination

https://neil.fraser.name/news/2026/09/03/
1456•pavel_lishin•12h ago•395 comments

Project Xanadu: Even More Hindsight

https://gwern.net/xanadu
20•andsoitis•1h ago•2 comments

Qwen 3.8 27B available on Cerebras at 1500 tokens/s

https://inference-docs.cerebras.ai/models/overview
473•altertable•8h ago•142 comments

New type of dice guarantees no tie when deciding who goes first

https://www.cbc.ca/lite/story/9.7328614
60•colinprince•2d ago•40 comments

The largest electric aircraft just flew [video]

https://www.youtube.com/watch?v=nM86DBOqgPM
218•feb•2d ago•151 comments

How an MIT research project became a global programming language

https://news.mit.edu/2026/how-mit-research-project-became-global-programming-language-0831
21•theanonymousone•3d ago•1 comments

From Hookswitch to Grave

https://computer.rip/2026-06-14-hookswitch-to-grave.html
6•Sniffnoy•46m ago•0 comments

Artificial beaver dams saw juvenile coho salmon survival rates go from 8% to 60%

https://www.discoverwildlife.com/animal-facts/artificial-beaver-dams-california
179•speckx•11h ago•60 comments

Which tools do Claude, Codex and Cursor choose? We measured 17k runs to find out

https://armature.tech/blog/which-tools-coding-agents-install
121•screm•6h ago•45 comments

Porting my 1993 Amiga game to Godot, with an LLM reading the 68000 assembly

https://babyloniantwins.com/blog/porting-a-1993-amiga-game-to-godot/
216•rabahs•12h ago•66 comments

K2 Horizon: A connected fleet of six open models

https://ifm.ai/blog/k2/
269•karimf•11h ago•86 comments

GPS glitched across the US by as much as 33 feet

https://www.sciencealert.com/gps-glitched-across-the-us-by-as-much-as-33-feet-scientists-have-nev...
135•thread_id•1d ago•77 comments

Any Human Ever – One life, drawn at random from all who have ever lived

https://anyhumanever.com/
489•thinkingemote•12h ago•247 comments

Xanadu was waiting for agents

https://zed.dev/blog/agentic-xanadu
95•nsm•2d ago•36 comments

Go grandmaster Shin defeats AI KataGo with a two-stone handicap

https://www.kedglobal.com/artificial-intelligence/newsView/ked202607210007
213•gmays•1d ago•61 comments

Never Forget How Eagerly Apple and Google Coddled Fascism

https://karlbode.com/never-forget-how-eagerly-apple-and-google-coddled-fascism/
16•ExMachina73•29m ago•0 comments

GLP-1s are being linked to fewer serious infections, including TB

https://gizmodo.com/ozempic-and-other-glp-1s-are-being-linked-to-fewer-serious-infections-includi...
73•gumby•4h ago•41 comments

Tasklet (YC P26) Is Hiring a Customer Success Engineer

https://tasklet.ai/careers/customer-success-engineer
1•mayop100•6h ago

Virtual Threads for a scripting language in Java 8 without Loom

https://jactl.io/blog/2026/08/28/jactl-virtual-threads
10•jaccomo•2d ago•1 comments

How concerned should we be about Astra's recurrent architecture?

https://www.lesswrong.com/posts/PLisnSFir8y5AHkmP/how-concerned-should-we-be-about-astra-s-recurrent
101•yurivish•10h ago•59 comments

Unusual Suspects

https://neal.fun/unusual-suspects/
120•beeperboy95•1d ago•24 comments

The true horror of Edgar Allan Poe’s stories lies in their confessions

https://yalereview.org/article/emily-ogden-edgar-allan-poe
59•lermontov•1d ago•23 comments

Ask HN: Who is using MCP in production?

25•sukit•16h ago•36 comments

Google Antigravity TOS: 3rd party usage can get Google account suspended

https://twitter.com/GergelyOrosz/status/2095453567955968398
290•tosh•16h ago•200 comments

A PCB business card with a batteryless LED, powered by the phone that taps it

https://www.kevin.md/the-business-card-that-lights-up.md/
49•thekevintang•2d ago•14 comments

OpenAI's GPT-6 Astra on ARC-AGI-3

https://arcprize.org/blog/astra
176•vignesh_warar•7h ago•107 comments

The asteroid currently hitting front end web development

https://nolanlawson.com/2026/08/23/the-asteroid-currently-hitting-frontend-web-development/
92•codechicago277•8h ago•106 comments

How to get a free .arpa domain

https://hawksley.dev/blog/get-free-arpa-domain
126•ethanhawksley•3d ago•13 comments

Ask HN: Why were OpenAI, Claude, and Grok simultaneously down?

343•halcdev•12h ago•528 comments