frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•12mo ago

Comments

steele•12mo ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•12mo ago
Lmao, gentrify cracked me up
neilv•12mo ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•12mo ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•11mo ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•12mo ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•12mo ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•12mo ago
May as well just release an executable tbh.
theamk•12mo ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•12mo ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•12mo ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Computer Hobby Movement in Canada

https://museum.eecs.yorku.ca/exhibits/show/hobby_canada/hobby_canada
91•rbanffy•2h ago•23 comments

MIT: 20% drop in incoming graduate students

https://president.mit.edu/writing-speeches/video-transcript-message-president-kornbluth-about-fun...
196•dmayo•58m ago•190 comments

Claude AI recovers an 11 yrs old BTC wallet holding 400k USD

https://www.tomshardware.com/tech-industry/cryptocurrency/bitcoin-trader-recovers-usd400-000-usin...
80•cednore•1h ago•41 comments

Show HN: Running the second public ODoH relay

https://numa.rs/blog/posts/odoh-anonymous-dns-without-an-account.html
88•rdme•5h ago•26 comments

Claude for Small Business

https://www.anthropic.com/news/claude-for-small-business
441•neilfrndes•11h ago•400 comments

Anthropic forms $200M partnership with the Gates Foundation

https://www.anthropic.com/news/gates-foundation-partnership
19•surprisetalk•35m ago•5 comments

The Tree House: A voyage to the source of a backyard dream

https://www.laphamsquarterly.org/roundtable/tree-house
43•Caiero•2d ago•4 comments

USDA Projects Smallest US Wheat Harvest Since 1972 Due to Plains Drought

https://www.agweb.com/news/usda-projects-smallest-us-wheat-harvest-1972-due-plains-drought
156•littlexsparkee•2h ago•112 comments

60fps Video on a CGA? – The GlyphBlaster

https://martypc.blogspot.com/2026/05/60fps-video-on-cga-glyphblaster.html
16•tambourine_man•4d ago•1 comments

Linux gaming is faster because Windows APIs are becoming Linux kernel features

https://www.xda-developers.com/linux-gaming-is-getting-faster-because-windows-apis-are-becoming-l...
890•haunter•3d ago•550 comments

Myths about /dev/urandom (2014)

https://www.2uo.de/myths-about-urandom/
51•signa11•4h ago•27 comments

Scorched Earth 2000 – Web

http://www.scorch2000.com/web/
336•meshko•15h ago•135 comments

Sam Altman's Business Dealings Under GOP Scrutiny Ahead of OpenAI's IPO

https://www.wsj.com/tech/ai/sam-altmans-business-dealings-under-gop-scrutiny-ahead-of-openais-ipo...
102•1vuio0pswjnm7•3h ago•72 comments

Leaving the Physical World

https://www.eff.org/pages/leaving-physical-world
118•andsoitis•4d ago•52 comments

Saying Goodbye to one line of APL

https://homewithinnowhere.com/posts/2026-05-10-one-line.html#fnref1
50•tosh•3d ago•12 comments

Setting up a free *.city.state.us locality domain (2025)

https://fredchan.org/blog/locality-domains-guide/
596•speckx•1d ago•194 comments

Pipes, Forks, and Zombies

https://cs61.seas.harvard.edu/wiki/2017/Shell3/
25•tosh•5h ago•3 comments

A Claude Code and Codex Skill for Deliberate Skill Development

https://github.com/DrCatHicks/learning-opportunities
156•cdrnsf•12h ago•31 comments

Meta's New Reality: Record High Profits. Record Low Morale

https://www.wired.com/story/meta-layoffs-bad-vibes-mark-zuckerberg-ai/
103•rustoo•1h ago•95 comments

MacBook Neo Deep Dive: Benchmarks, Wafer Economics, and the 8GB Gamble

https://www.jdhodges.com/blog/macbook-neo-benchmarks-analysis/
292•tosh•21h ago•354 comments

Swift bricks to be installed on all new buildings in Scotland

https://www.theguardian.com/environment/2026/jan/28/swift-bricks-to-be-installed-in-all-new-build...
77•bookofjoe•4d ago•36 comments

A History of IDEs at Google

https://laurent.le-brun.eu/blog/a-history-of-ides-at-google
427•laurentlb•5d ago•275 comments

The Emacsification of Software

https://sockpuppet.org/blog/2026/05/12/emacsification/
369•rdslw•1d ago•228 comments

The Siri for Families Apple Will Never Build

https://taoofmac.com/space/blog/2026/05/14/1220
73•rcarmo•4h ago•42 comments

Technical Dimensions of Live Feedback in Programming Systems

https://joshuahhh.com/dims-of-feedback/
41•tobr•4d ago•6 comments

The European Union backs Italy's right to make Meta pay for news

https://www.niemanlab.org/2026/05/the-eu-backs-italys-right-to-make-meta-pay-for-news/
64•giuliomagnifico•4h ago•42 comments

Chess puzzle I found in my dad's old book

https://ardoedo.it/kempelen/
203•Eswo•2d ago•67 comments

Beware of Drunk Deer, French Police Say, Announcing Season of Inebriation

https://www.nytimes.com/2026/05/13/world/europe/france-drunk-deer.html
26•bookofjoe•2h ago•7 comments

Avoiding and reducing microplastic false positives from dry glove contact

https://pubs.rsc.org/en/content/articlelanding/2026/ay/d5ay01801c
88•efavdb•14h ago•37 comments

Show HN: Needle: We Distilled Gemini Tool Calling into a 26M Model

https://github.com/cactus-compute/needle
704•HenryNdubuaku•1d ago•200 comments