frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Waymo pauses Atlanta service as its robotaxis keep driving into floods

https://techcrunch.com/2026/05/21/waymo-pauses-atlanta-service-as-its-robotaxis-keep-driving-into...
37•mattas•40m ago•18 comments

Flipper One – we need your help

https://blog.flipper.net/flipper-one-we-need-your-help/
732•sandebert•6h ago•329 comments

Indexing a year of video locally on a 2021 MacBook with Gemma4-31B (50GB swap)

https://blog.simbastack.com/indexed-a-year-of-video-locally/
106•asenna•3h ago•31 comments

Python 3.15: features that didn't make the headlines

https://blog.changs.co.uk/python-315-features-that-didnt-make-the-headlines.html
212•rbanffy•6h ago•97 comments

London Mayor Blocks Palantir

https://www.theguardian.com/uk-news/2026/may/21/london-mayor-sadiq-khan-blocks-met-police-deal-wi...
60•ZiiS•36m ago•7 comments

ParadeDB (YC S23) Is Hiring Distributed Systems/Platform Engineers

1•philippemnoel•10m ago

We're testing new ad formats in Search and expanding our Direct Offers pilot

https://blog.google/products/ads-commerce/google-marketing-live-search-ads/
459•sofumel•7h ago•391 comments

Lost Images from the 1945 Trinity Nuclear Test Restored

https://spectrum.ieee.org/trinity-nuclear-test
160•pseudolus•6h ago•54 comments

Mounting Git commits as folders with NFS

https://jvns.ca/blog/2023/12/04/mounting-git-commits-as-folders-with-nfs/
34•pvtmert•2d ago•20 comments

Launch HN: Runtime (YC P26) – Sandboxed coding agents for everyone on a team

https://www.runtm.com/
12•gustrigos•1h ago•1 comments

FatGid: FreeBSD 14.x kernel local privilege escalation

https://fatgid.io/
59•WhyNotHugo•4h ago•14 comments

Michael Keating has died

https://www.bigfinish.com/news/v/michael-keating-1947-2026
48•speckx•2h ago•27 comments

What Is Happening to Publishing?

https://resobscura.substack.com/p/what-is-happening-to-publishing
16•benbreen•1d ago•0 comments

Project Hail Mary – Stellar Navigation Chart

https://valhovey.github.io/gaia-mary/
8•speleo•48m ago•0 comments

Google's Antigravity Bait and Switch

https://www.0xsid.com/blog/antigravity-bait-n-switch
301•ssiddharth•3h ago•155 comments

We Reverse-Engineered Docker Sandbox's Undocumented MicroVM API

https://rivet.dev/blog/2026-02-04-we-reverse-engineered-docker-sandbox-undocumented-microvm-api/
27•yakkomajuri•2h ago•2 comments

Vivaldi 8.0

https://vivaldi.com/blog/vivaldi-on-desktop-8-0/
234•OuterVale•9h ago•169 comments

Show HN: I Dedicated 4 Years to Mastering Offline Password Cracking

94•bojta-lepenye•4h ago•5 comments

Show HN: Rmux – A programmable terminal multiplexer with a Playwright-style SDK

https://github.com/helvesec/rmux
141•shideneyu•7h ago•68 comments

Who Wins and Who Loses in Prediction Markets? Evidence from Polymarket

https://papers.ssrn.com/sol3/papers.cfm?abstract_id=6443103
92•vcf•4h ago•67 comments

AI is just unauthorised plagiarism at a bigger scale

https://axelk.ee/ai-is-just-unauthorised-plagiarism-at-a-bigger-scale/
584•speckx•3h ago•456 comments

Get your passwords out of Bitwarden while you still can

https://www.osnews.com/story/145029/get-your-passwords-out-of-bitwarden-while-you-still-can/
149•speckx•2h ago•106 comments

What Do Gödel's Incompleteness Theorems Mean?

https://www.quantamagazine.org/what-do-godels-incompleteness-theorems-truly-mean-20260518/
88•baruchel•2d ago•38 comments

A Bipartisan Amendment Would End Police License Plate Tracking Nationwide

https://www.wired.com/story/a-bipartisan-amendment-would-end-police-license-plate-tracking-nation...
128•cdrnsf•4h ago•34 comments

IBM invented semiconductor manufacturing automation

https://spectrum.ieee.org/semiconductor-fabrication
49•rbanffy•6h ago•1 comments

No Slop Grenade

https://noslopgrenade.com/
292•napolux•7h ago•176 comments

Show HN: I reverse engineered Apple's video wallpapers

https://github.com/kageroumado/phosphene
378•kageroumado•17h ago•93 comments

Flipper One Tech Specs

https://docs.flipper.net/one/general/tech-specs
485•gregsadetsky•22h ago•161 comments

The Letter S, by Donald Knuth (1980) [pdf]

https://gwern.net/doc/design/typography/1980-knuth.pdf
248•bambax•17h ago•43 comments

Museum of Pocket Calculating Devices

https://www.calculators.de/
5•ohjeez•1h ago•0 comments