frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Show HN: HackerBooks – HackerTube, but for books mentioned on HN

https://hackerbooks.org
751•roansh•7h ago•161 comments

Nibnib: Image compression with extreme decompression speed

https://github.com/raphlinus/nibnib
67•raphlinus•2d ago•7 comments

HackerTube: YouTube built from videos recommended by HN

https://karpathy.bearblog.dev/hacker-tube/
2165•karpathy•1d ago•526 comments

Tips for more effective fuzz testing with AFL++

https://nullprogram.com/blog/2025/02/05/
51•luu•4d ago•7 comments

New 3D thermal invisibility cloak makes objects disappear from infrared cameras

https://www.sciencedaily.com/releases/2026/10/261025073051.htm
22•stevenalowe•2d ago•8 comments

Mathematics has changed. Let's act like it

https://terrytao.wordpress.com/2026/11/01/mathematics-has-changed-lets-act-like-it/
178•smilelamp•4h ago•195 comments

Copper – A minimal low-level programming language with OOP and generics

https://tibleiz.net/copper/
115•bogdanoff_2•2d ago•65 comments

So I guess everyone uses LLMs to think now

https://eva.ac/blog/llms/
8•xyzeva•1h ago•0 comments

The She-Wolves of Jülich

https://www.historytoday.com/archive/history-matters/she-wolves-julich
5•Thevet•1d ago•0 comments

Ask HN: Which TV do you recommend for privacy?

56•LecroJS•3h ago•108 comments

Show HN: OmniDiff – Opensource, super fast, content aware Git difftool, in Rust

https://github.com/ivankovic/omnidiff
125•FabCH•10h ago•35 comments

Proving and improving the Platonic Representation Hypothesis with JEPAs

https://arxiv.org/abs/2610.39302
98•Anon84•9h ago•55 comments

Lenovo's 'encrypted' fingerprint USB is just an unencrypted SD card in a case

https://www.reddit.com/r/technology/comments/1xl2pr3/lenovos_encrypted_fingerprint_usb_drive_is_j...
353•entryleveljobsc•8h ago•122 comments

Bidirectional charging during grid outages

https://www.jefftk.com/p/bidirectional-charging-during-grid-outages
78•luu•1d ago•115 comments

Novellas with Groff

https://movq.de/blog/postings/2026-10-31/0/POSTING-en.html
102•dverlaeckt80•9h ago•44 comments

Brazilian Court Sanctions Lawyers for Prompt Injection in Court Filing

https://jetstream.security/insights/brazilian-court-sanctions-prompt-injection-filing/
305•doodlesdev•20h ago•188 comments

Seoul Viosys begins production of rare-earth-free white light emitter

https://www.semiconductor-today.com/news_items/2026/oct/seoul-291026.shtml
124•gmays•6h ago•30 comments

Parchment Paper History: How We Got Paper Perfect for Baking (2019)

https://tedium.co/2019/11/21/nonstick-parchment-paper-history/
30•colinprince•1d ago•13 comments

One-minute frequency disturbances from synchronization in power systems

https://www.nature.com/articles/s41560-026-02144-0
109•croes•1d ago•38 comments

The AI cost of JavaScript frameworks

https://nolanlawson.com/2026/10/28/the-ai-cost-of-javascript-frameworks/
272•luu•17h ago•210 comments

Radiation Map of the World

https://radiaverse.com/
115•slater•4d ago•34 comments

Show HN: I rebuilt my old canvas 3D library as a small WebGL 2 library – phoria2

https://kevs3d.co.uk/phoria2/
67•kevs3d•1d ago•10 comments

John Leeson (the voice of K9) has died

https://www.doctorwhonews.net/2026/11/john_leeson_1943_2026.html
25•slyrus•2h ago•1 comments

Frontier Airlines Likely Breached

https://www.reddit.com/r/frontierairlines/comments/1xl20e8/psa_email_scam/
154•999900000999•6h ago•50 comments

Show HN: Point your camera at a landscape to learn about its geology

https://outcrop.rocks/
138•headsupernova•3d ago•36 comments

Domain hacks with unusual Unicode characters (2018)

https://shkspr.mobi/blog/2018/11/domain-hacks-with-unusual-unicode-characters/
47•n_plus_1_acc•12h ago•46 comments

Patrick Stewart taught us what good men do with power

https://www.vox.com/politics/508526/patrick-stewart-jean-luc-picard-star-trek-liberalism
320•rhaynes•5h ago•228 comments

Landline phones will switch off across Britland in 100 days, no extensions

https://www.theregister.com/networks/2026/11/01/landline-phones-will-switch-off-across-britland-i...
111•edward•7h ago•83 comments

Understanding Email Encryption (2025)

https://www.fastmail.com/blog/email-encryption/
119•nmjenkins•2d ago•23 comments

An Italian farmer found some unknown seeds in his attic and planted them

https://www.smithsonianmag.com/science-nature/italian-farmer-found-unknown-seeds-attic-with-nothi...
751•ecares•1d ago•197 comments