frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

GrapheneOS has been ported to Android 17

https://discuss.grapheneos.org/d/36469-grapheneos-has-been-ported-to-android-17-and-official-rele...
307•Cider9986•3h ago•126 comments

Running local models is good now

https://vickiboykis.com/2026/06/15/running-local-models-is-good-now/
975•jfb•9h ago•415 comments

Humiliating IIS servers for fun and jail time

https://mll.sh/humiliating-iis-servers-for-fun-and-jail-time/
45•denysvitali•1h ago•4 comments

SpaceX to buy Cursor for $60B

https://www.reuters.com/legal/transactional/spacex-buy-anysphere-60-billion-2026-06-16/
835•itsmarcelg•13h ago•1283 comments

Wolfram Language and Mathematica Version 15, AI Assistant, Symbolic Music, More

https://writings.stephenwolfram.com/2026/06/launching-version-15-of-wolfram-language-mathematica-...
25•alok-g•1h ago•2 comments

TIL: You can make HTTP requests without curl using Bash /dev/TCP

https://mareksuppa.com/til/bash-dev-tcp-http-without-curl/
240•mrshu•7h ago•138 comments

Calvin and Hobbes and the price of integrity

https://therepublicofletters.substack.com/p/calvin-and-hobbes-and-the-price-of
250•pseudolus•8h ago•110 comments

Mechanical Watch (2022)

https://ciechanow.ski/mechanical-watch/
617•razin•13h ago•114 comments

Stop Using JWTs

https://gist.github.com/samsch/0d1f3d3b4745d778f78b230cf6061452
224•dzonga•7h ago•133 comments

GPT‑NL: a sovereign language model for the Netherlands

https://www.tno.nl/en/digital/artificial-intelligence/gpt-nl/
126•root-parent•6h ago•132 comments

A brief tour of the PDP-11, the most influential minicomputer of all time (2022)

https://arstechnica.com/gadgets/2022/03/a-brief-tour-of-the-pdp-11-the-most-influential-minicompu...
26•jensgk•1d ago•1 comments

Has AI already killed self-help nonfiction books?

https://tim.blog/2026/06/12/has-ai-already-killed-nonfiction/
138•imakwana•7h ago•136 comments

But yak shaving is fun (2019)

https://parksb.github.io/en/article/32.html
198•parksb•10h ago•55 comments

A Nipkow Disk Mechanical TV Simulator

https://analogtv.net/mechanical-lab
15•ambanmba•2d ago•4 comments

10Gb/s Ethernet: switching to a Broadcom SFP+ module

https://www.gilesthomas.com/2026/06/10g-ethernet-switching-to-broadcom-sfp-plus
87•gpjt•6h ago•67 comments

Correlated randomness in Slay the Spire 2

https://tck.mn/blog/correlated-randomness-sts2/
273•rdmuser•14h ago•86 comments

Apple's weird anti-nausea dots cured my car sickness

https://www.theverge.com/tech/942854/apple-vehicle-motion-cues-review-really-work
542•neilfrndes•8h ago•179 comments

NLnet announces funding for 67 more open-source projects

https://nlnet.nl/news/2026/20260616-67-new-projects.html
30•laurenth•1h ago•8 comments

Frood, an Alpine Initramfs NAS (2024)

https://words.filippo.io/frood/
24•ethanpil•4h ago•8 comments

Apple is about to make Hide My Email useless

https://arseniyshestakov.com/2026/06/16/apple-is-about-to-make-hide-my-email-useless/
367•SXX•5h ago•224 comments

Show HN: cuTile Rust: Safe, data-race-free GPU kernels in Rust

https://github.com/nvlabs/cutile-rs
23•melihelibol•4h ago•7 comments

The UK's Teen Social Media Ban Is Political Theater, Not Child Safety Policy

https://www.techdirt.com/2026/06/16/the-uks-teen-social-media-ban-is-political-theater-not-child-...
74•hn_acker•2h ago•68 comments

W.H. Auden and James Schuyler in life and literature

https://hedgehogreview.com/web-features/thr/posts/companions-on-parnassus
11•Caiero•3d ago•0 comments

Formal Methods and the Future of Programming

https://blog.janestreet.com/formal-methods-at-jane-street-index/
71•nextos•5d ago•2 comments

Is Meta destroying its engineering organization?

https://newsletter.pragmaticengineer.com/p/why-is-meta-destroying-its-engineering
370•throwarayes•7h ago•343 comments

Qwen-Robot Suite: A Foundation Model Suite for Physical World Intelligence

https://qwen.ai/blog?id=qwen-robotsuite
116•ilreb•11h ago•17 comments

Making ast.walk 220x Faster

https://reflex.dev/blog/why-ast-walk-when-you-can-ast-sprint/
83•palashawas•8h ago•13 comments

SubQ 1.1 Small

https://subq.ai/subq-1-1-small-technical-report
103•EDM115•9h ago•45 comments

An interview with an Apple emoji designer

https://shadycharacters.co.uk/2026/06/ollie-wagner/
101•nate•3d ago•52 comments

Show HN: VoiceDraw – Talk system design out loud, the diagrams draw themselves

https://voicedraw.com/
27•ajaypanthagani•5h ago•12 comments