frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

iCloud+ Hide My Email addresses will remain on icloud.com

https://developer.apple.com/news/?id=1ptvdtcm
301•K7PJP•5h ago•75 comments

Xiaomi: New CPU matches Apple cores single threaded, much faster multithreaded

https://twitter.com/lemire/status/2091894299289874926
772•tosh•13h ago•521 comments

MS Paint and Photos inivisibly watermark even locally generated output with GUID

https://xusheng.dev/posts/reversing/mspaint_invisible_watermark/main/
607•ComputerGuru•12h ago•240 comments

How Universities Should Prepare Founders

https://paulgraham.com/prepare.html
46•gmays•2h ago•45 comments

Moon (2024)

https://ciechanow.ski/moon/
120•simonebrunozzi•6h ago•20 comments

How Europe is killing makers and micro-entrepreneurs

https://lectronz.com/u/lectronz/articles/how-europe-is-killing-makers-and-micro-entrepreneurs
1118•l-one-lone•15h ago•674 comments

Headlong: A Microharness for Persistent Agents

https://www.laude.org/updates/headlong-a-microharness-for-persistent-agents
3•lbw1215•17m ago•0 comments

The entire city of San Francisco as a video game

https://sf.thijs.gg/
382•centrosphere•11h ago•126 comments

Bookshelf – Self-hosted eBook library that runs on object storage

https://github.com/murerkinn/bookshelf
58•arbayi•5h ago•21 comments

Where did all the public bathrooms go?

https://daily.jstor.org/where-did-all-the-public-bathrooms-go/
188•herbertl•11h ago•380 comments

Was Modern Art a CIA Psy-Op? (2020)

https://daily.jstor.org/was-modern-art-really-a-cia-psy-op/
37•neom•2h ago•38 comments

Jabber/XMPP: 25 Years of Digital Independence

https://gultsch.de/posts/25-years-of-digital-independence/
188•inputmice•12h ago•84 comments

Vintage Artificial Intelligence: Before It Got Awkward

https://blog.archive.org/2026/08/16/vintage-artificial-intelligence-before-it-got-awkward/
69•signor_bosco•7h ago•14 comments

Training AI to Paint with Code

https://surya.website/rling-qwen-to-paint-with-code
39•Tiberium•1d ago•3 comments

Ask HN: Good large format (>20 inches) touchscreen E-Paper display options?

6•foota•25m ago•0 comments

Show HN: I wrote a BASIC interpreter that boots on UEFI machines

https://tarjan.itch.io/thoreaubasic
17•Gorsefound•1d ago•7 comments

Show HN: A Modern GUI Library for Ada: CSS Styling, XML UI, SDL3

https://github.com/ovenpasta/adi2
26•ovenpasta•11h ago•14 comments

Thomson Reuters Launches Its Own Frontier Model

https://www.thomsonreuters.com/en/press-releases/2026/august/thomson-reuters-leverages-its-world-...
42•giuliomagnifico•1h ago•10 comments

Show HN: How to mentally calculate the day of the week for any date

https://tinkerandsee.com/weekday/
46•yang140•13h ago•9 comments

Octopus intelligence may be related to never-before-seen mutation

https://www.smithsonianmag.com/smart-news/why-are-some-octopuses-so-smart-the-answer-might-lie-in...
102•bookofjoe•10h ago•80 comments

LLMs could control their host machines by exploiting inference engines

https://boydkane.com/essays/llms-could-control-their-host-machines-by-exploiting-inference-engines
111•zdw•9h ago•56 comments

Peppermint oil reduces blood pressure by 8.48 mmHg in small study

https://journals.plos.org/plosone/article?id=10.1371/journal.pone.0344538
108•brandonb•13h ago•66 comments

One corner of China’s internet is insisting that the Tang Dynasty never existed

https://www.cnn.com/2026/08/19/style/china-tang-dynasty-never-existed-hoax-intl-hnk
144•related•7h ago•121 comments

Autostep (YC P26) Is Hiring AI/Fullstack Engineers and a Chief of Staff

https://app.dover.com/Autostep/careers/e9510e3b-a854-4e48-9e5d-c89796acaed4
1•adawg4•10h ago

Could we dredge the Netherlands without fossil fuels? (2018)

https://solar.lowtechmagazine.com/2018/08/could-we-dredge-the-netherlands-without-fossil-fuels
41•at1as•13h ago•48 comments

Show HN: SteppeWM – a stacking IceWM-like Wayland compositor

https://github.com/uncognic/steppewm
8•uncognic•3d ago•5 comments

SeL4 security proofs now complete on AArch64

https://proofcraft.systems/news-2026/#2026-08-21
176•snvzz•16h ago•38 comments

Oceans hit highest temperature on record

https://www.bbc.com/news/articles/c62m4gpnp78o
451•tcp_handshaker•8h ago•366 comments

IPFS Maintainers Winding Down

https://ipshipyard.com/blog/2026-the-end-of-ipfs-at-shipyard/
338•iand•12h ago•170 comments

Fences, Not Sandboxes

https://yegge.ai/essays/fences-not-sandboxes/
60•tosh•10h ago•65 comments