frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Our position on open-weights models

https://www.anthropic.com/news/position-open-weights-models
600•surprisetalk•6h ago•842 comments

Using an open model feels surprisingly good

https://matthewsaltz.com/blog/using-an-open-model-feels-surprisingly-good/
87•msaltz•1h ago•37 comments

A $500 RL fine-tune of a 9B open model beat frontier models on catalog review

https://fermisense.com/when-machines-take-the-wheel/
53•ilreb•2h ago•11 comments

Benchmarking Opus 5 on SlopCodeBench

https://github.com/humanlayer/advanced-context-engineering-for-coding-agents/blob/main/benchmarki...
185•dhorthy•5h ago•44 comments

Astronauts describe persistent 'observer' sensation after 6 month missions

https://spacedaily.com/sd-v-astronauts-returning-from-six-month-missions-describe-a-persistent-ob...
125•zdw•5h ago•64 comments

RTX 2080 Ti Memory Upgrade to 22 GB

https://gpusolutions.net/rbservices/graphics-card-upgrade/
54•wslh•3d ago•26 comments

Residential Proxies Are a National Security Threat

https://jacob.gold/posts/residential-proxies-are-a-national-security-threat/
24•joshbetz•2h ago•22 comments

EYG: A Programming Language for Humans

https://crowdhailer.me/2026-06-08/a-programming-language-for-humans/
28•crowdhailer•1h ago•10 comments

Watching Go's new garbage collector move through the heap

https://theconsensus.dev/p/2026/07/19/observing-gos-garbage-collector-old-and-new.html
182•matheusmoreira•2d ago•17 comments

C/C++ projects packaged for Zig

https://github.com/allyourcodebase
39•jcbhmr•5h ago•23 comments

Show HN: Yap – OSS on-device voice dictation for macOS with no model to download

https://github.com/FrigadeHQ/yap
34•pancomplex•9h ago•6 comments

DConf 2026 in London

https://dconf.org/2026/index.html
61•teleforce•5h ago•27 comments

Three Theses on the Literacy Crisis

https://trevoraleo.substack.com/p/three-theses-on-the-literacy-crisis
32•samclemens•2d ago•22 comments

An Uncomplicated Man

https://www.lrb.co.uk/the-paper/v48/n14/emily-wilson/an-uncomplicated-man
13•andsoitis•1h ago•4 comments

Vehicle Motion Cues

https://support.apple.com/guide/iphone/iphone-comfortably-riding-a-vehicle-iph55564cb22/ios
27•Austin_Conlon•3h ago•14 comments

The Burau representation of the braid group is faithful for n = 4

https://arxiv.org/abs/2607.05283
26•wglb•4h ago•9 comments

Launch HN: Rise Reforming (YC S26) – Turning Waste Gases into Valuable Chemicals

https://www.rise-reforming.com
65•george_rose25•8h ago•30 comments

Self-contained highly-portable Python distributions

https://gregoryszorc.com/docs/python-build-standalone/main/
125•jcbhmr•9h ago•28 comments

Glue bonds to nonstick surfaces and wipes clean with ethanol

https://cen.acs.org/materials/adhesives/glue-bonds-nonstick-surfaces-wipes-clean/104/web/2026/07
160•gmays•4d ago•91 comments

A Dying Art: The last of the morticians

https://harpers.org/archive/2026/08/a-dying-art-john-semley-mortuary-sciences-competition/
10•Petiver•3d ago•0 comments

Securing Services with Rootless Containers

https://blog.coderspirit.xyz/blog/2026/07/06/securing-services-with-rootless-containers/
76•speckx•4d ago•24 comments

Ray tracing massive amounts of animated geometry using tetrahedral cages

https://gpuopen.com/learn/ray-tracing-massive-amounts-animated-geometry/
85•LorenDB•4d ago•10 comments

Some combinatorial applications of spacefilling curves

https://www2.isye.gatech.edu/~jjb/research/mow/mow.html
25•shraiwi•2d ago•1 comments

A missing underscore sent innocent man to prison for 18 months

https://arstechnica.com/tech-policy/2026/07/police-missed-one-underscore-and-sent-the-wrong-man-t...
200•quantified•6h ago•102 comments

How real are real numbers? (2004)

https://arxiv.org/abs/math/0411418
59•surprisetalk•12h ago•47 comments

Netflix employee fired for sharing personal details in retreat trust exercise

https://nypost.com/2026/07/26/us-news/netflix-exec-goes-ballistic-after-being-fired-for-stunning-...
210•softwaredoug•4h ago•165 comments

UpCodes (YC S17) is hiring remote AE's to help make buildings cheaper

https://up.codes/careers?utm_source=HN
1•Old_Thrashbarg•11h ago

The computer that helped win World War II

https://spectrum.ieee.org/colossus-computer-ieee-milestone
183•baruchel•5d ago•73 comments

Paged Out #9 [pdf]

https://pagedout.institute/download/PagedOut_009.pdf
194•laurensr•13h ago•22 comments

Exploiting Volvo/Eicher's fleet platform to gain control over all users/vehicles

https://eaton-works.com/2026/07/27/my-eicher-hack/
144•EatonZ•13h ago•47 comments