frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Why some US restaurants are banning tips

https://www.bbc.com/news/articles/c4g36yze692o
28•rock_artist•20m ago•18 comments

iCloud+ Hide My Email addresses will remain on icloud.com

https://developer.apple.com/news/?id=1ptvdtcm
472•K7PJP•12h ago•138 comments

Xiaomi: New CPU matches Apple cores single threaded, much faster multithreaded

https://twitter.com/lemire/status/2091894299289874926
881•tosh•19h ago•625 comments

MS Paint and Photos inivisibly watermark even locally generated output with GUID

https://xusheng.dev/posts/reversing/mspaint_invisible_watermark/main/
722•ComputerGuru•19h ago•317 comments

How Universities Should Prepare Founders

https://paulgraham.com/prepare.html
131•gmays•8h ago•160 comments

SiFive's First Server Platform

https://chipsandcheese.com/p/sifives-first-server-platform
58•geerlingguy•7h ago•14 comments

How Europe is killing makers and micro-entrepreneurs

https://lectronz.com/u/lectronz/articles/how-europe-is-killing-makers-and-micro-entrepreneurs
1388•l-one-lone•21h ago•865 comments

Moon (2024)

https://ciechanow.ski/moon/
197•simonebrunozzi•12h ago•36 comments

The entire city of San Francisco as a video game

https://sf.thijs.gg/
476•centrosphere•17h ago•142 comments

Headlong: A Microharness for Persistent Agents

https://www.laude.org/updates/headlong-a-microharness-for-persistent-agents
63•lbw1215•6h ago•20 comments

What's new in Emacs 31.1

https://www.masteringemacs.org/article/whats-new-in-emacs-311
147•geospeck•21h ago•29 comments

Bookshelf – Self-hosted eBook library that runs on object storage

https://github.com/murerkinn/bookshelf
101•arbayi•11h ago•39 comments

Where did all the public bathrooms go?

https://daily.jstor.org/where-did-all-the-public-bathrooms-go/
248•herbertl•17h ago•556 comments

Nostr is an inclusive communication commons

https://nostr.org/
147•Bluestein•2d ago•92 comments

Show HN: I wrote a BASIC interpreter that boots on UEFI machines

https://tarjan.itch.io/thoreaubasic
68•Gorsefound•1d ago•17 comments

Vintage Artificial Intelligence: Before It Got Awkward

https://blog.archive.org/2026/08/16/vintage-artificial-intelligence-before-it-got-awkward/
104•signor_bosco•13h ago•20 comments

Peppermint oil reduces blood pressure by 8.48 mmHg in small study

https://journals.plos.org/plosone/article?id=10.1371/journal.pone.0344538
167•brandonb•19h ago•80 comments

Training AI to Paint with Code

https://surya.website/rling-qwen-to-paint-with-code
99•Tiberium•1d ago•12 comments

Crafting QR Codes: A deep dive into QR code art (2024)

https://kylezhe.ng/writes/crafting-qr-codes
86•subset•20h ago•5 comments

Walgit – a Git server that is one binary in front of an object store

https://github.com/tobi/walgit
93•matallo•19h ago•23 comments

Jabber/XMPP: 25 Years of Digital Independence

https://gultsch.de/posts/25-years-of-digital-independence/
233•inputmice•18h ago•133 comments

Screen viewing time from age 1 to 8 years and subsequent academic performance

https://link.springer.com/article/10.1007/s12519-026-01046-1
16•Markoff•1h ago•8 comments

LLMs could control their host machines by exploiting inference engines

https://boydkane.com/essays/llms-could-control-their-host-machines-by-exploiting-inference-engines
150•zdw•15h ago•68 comments

Was modern art a CIA psy-op? (2020)

https://daily.jstor.org/was-modern-art-really-a-cia-psy-op/
83•neom•8h ago•134 comments

SeL4 security proofs now complete on AArch64

https://proofcraft.systems/news-2026/#2026-08-21
192•snvzz•22h ago•43 comments

I were 17, I'd learn how to build LLMs from scratch

https://twitter.com/paulg/status/2091544343589060625
555•bilsbie•1d ago•635 comments

Show HN: Screen memory without screenshots, just text to Markdown

https://github.com/dragthelake/ambient-context
51•Dramatize•5h ago•18 comments

Octopus intelligence may be related to never-before-seen mutation

https://www.smithsonianmag.com/smart-news/why-are-some-octopuses-so-smart-the-answer-might-lie-in...
168•bookofjoe•16h ago•128 comments

Oceans hit highest temperature on record

https://www.bbc.com/news/articles/c62m4gpnp78o
574•tcp_handshaker•15h ago•445 comments

Show HN: PicoMQ – Durable Streams over HTTP, on object storage

https://picomq.com/
123•adesh_nalpet•18h ago•22 comments