frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Cloud in a Bottle: making self-hosting accessible to everyone

https://cloudinabottle.org/blog/launch-post
273•zplizzi•5h ago•109 comments

The revolt of the reader

https://bcantrill.dtrace.org/2026/09/05/the-revolt-of-the-reader/
233•chmaynard•8h ago•88 comments

GPT-6 Astra on robot arms

https://openai.robocurve.org/gpt-6-astra/
121•Anon84•3h ago•74 comments

OpenBSD Stories: Strange Medieval Devices

http://miod.online.fr/software/openbsd/stories/smd.html
30•zdw•3d ago•7 comments

The ColorChecker, photography's most important 24 squares, turns 50

https://www.dpreview.com/news/the-colorchecker-photographys-most-important-24-squares-turns-50/
22•sohkamyung•4d ago•1 comments

Chrome again exempts Google from user site data settings

https://lapcatsoftware.com/articles/2026/9/1.html
233•ExMachina73•5h ago•36 comments

Learn Programming with OCaml

https://usr.lmf.cnrs.fr/lpo/
217•elvis70•12h ago•82 comments

Private German rocket makes history, reaches orbit from European soil

https://www.space.com/space-exploration/launches-spacecraft/isar-aerospace-second-launch-norway-a...
465•bookmtn•9h ago•246 comments

The "$60 Gaming PC" – AMD BC-250 (2025)

https://devquasar.com/hardware/the-60-gaming-pc-amd-bc-250/
322•networked•16h ago•96 comments

Discovery of a new OpenAI agent message board

https://collusion.wiki/
2154•moultano•1d ago•1531 comments

RecurseCenter.return()

https://mm-dev.rocks/series/recursecenter.return/
34•evakhoury•4d ago•3 comments

Actively exploited sandbox RCE in all Chromium versions

https://nvd.nist.gov/vuln/detail/cve-2026-85046
762•negura•1d ago•451 comments

Nitter has more working instances than before the takedowns

https://codeberg.org/mv12star/shitter/wiki/Instances
658•Cider9986•1d ago•319 comments

Visualizing Rust's Vtables: How dyn Trait Works In Memory

https://sofiabelen.github.io/projects/visualizing-rusts-vtables-how-dyn-trait-works-in-memory/
153•torutofu•16h ago•24 comments

LLMs as a Cognitive Virus

https://arxiv.org/abs/2609.03344
236•canjobear•9h ago•183 comments

How Swiss tables work in Go built-in map

https://victoriametrics.com/blog/go-swiss-table-map/index.html
61•valyala•2d ago•4 comments

Topologist's Map of the World

https://www.futilitycloset.com/2026/09/01/small-world-20/
62•beardyw•4d ago•20 comments

Music Theory for Programmers

https://runjs.app/blog/music-theory-for-programmers
10•birdculture•3d ago•1 comments

Finite time blowup for an averaged three-dimensional Navier-Stokes equation (2014)

https://terrytao.wordpress.com/2014/02/04/finite-time-blowup-for-an-averaged-three-dimensional-na...
65•gmays•9h ago•33 comments

AI, Tools and Transformation

https://www.ben-evans.com/benedictevans/2026/9/3/ai-tools-and-transformation
13•firexcy•3h ago•3 comments

Delidded Intel I9-14900KS CT Scan

https://www.lttlabs.com/articles/2026/09/02/delidded-intel-i9-14900ks
87•willx86•3d ago•3 comments

Balrogg: Demonically compacting (up to 15%) lossless Vorbis/Opus recompressor

https://github.com/iczelia/balrogg
73•palaiologos•2d ago•10 comments

Terpstra Keyboard

http://terpstrakeyboard.com/
125•cl3misch•19h ago•57 comments

Show HN: Fly By – retro biplane flying game

https://michaelteter.com/flyby.html
67•michaelteter•4d ago•44 comments

OKF Agent Memory – Git-native persistent memory for AI coding agents

https://github.com/okf-memory/okf-agent-memory
54•okf_memory•7h ago•18 comments

Statichost.eu – European static site hosting

https://www.statichost.eu/
455•p4bl0•1d ago•205 comments

Can AI design circuit boards yet?

https://eebench.org/blog/can-ai-design-circuit-boards-yet/
399•iopapa•1d ago•212 comments

ISAR Aerospace 5 Sept Mission Onward and Upward

https://isaraerospace.com/mission-updates-overview
29•t43562•9h ago•4 comments

CHC5: Open Camera System – Image Sensor Specification Comparison

https://www.circuitvalley.com/2026/08/chc5-open-camera-sensor-comparison-specification.html
20•devoxel•3d ago•2 comments

Stopping the Unstoppable: When an unstoppable force meets a dashpot snubber

https://practical.engineering/blog/2026/9/1/stopping-the-unstoppable
60•crescit_eundo•4d ago•7 comments