frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Introducing System One Models and Jev

https://typesafe.ai/blog/introducing-system-one-models-and-jev
1415•albelfio•15h ago•402 comments

Learning Programming in an Age of LLMs

https://blog.ploeh.dk/2026/09/16/on-learning-programming-in-an-age-of-llms/
24•moneroloop2018•1h ago•8 comments

Show HN: An e-ink frame that hears birds and draws them as 1800s illustrations

https://github.com/arnegiacomo/fugleramme
1662•arnemunthekaas•21h ago•207 comments

Apple Reference Image: A New Approach for Verified Photography

https://security.apple.com/blog/apple-reference-image/
263•imwally•8h ago•192 comments

Mistral X Mozilla: Private, Multilingual AI Browsing

https://mistral.ai/news/mistral-x-mozilla/
35•vertigoruntime•2h ago•8 comments

Show HN: I made a flight simulator, except you're just a passenger

https://inflightsimulator.com
204•rkotcher•2d ago•102 comments

An update on Wayback Machine access

https://blog.archive.org/2026/09/15/an-update-on-wayback-machine-access/
544•ChrisArchitect•16h ago•272 comments

Doing Everyone Else's Job

https://yosefk.com/blog/doing-everyone-elses-job.html
75•luu•1d ago•38 comments

Gemini 3.8 Live and 3.8 Live Extended Thinking

https://blog.google/innovation-and-ai/models-and-research/gemini-models/gemini-3-8-live-gemini-3-...
419•leumon•16h ago•273 comments

Negativland, Culture Jamming, and the Art of Making Something New

https://blog.archive.org/2026/09/11/negativland-culture-jamming-and-the-art-of-making-something-new/
84•bananaboy•7h ago•20 comments

Building a Linux GPU Driver for the M4 Mac Mini in One Month

https://codyho.dev/blog/gpu-driver/
329•ADevWithAnIdea•14h ago•191 comments

German Rheinmetall open-sources its Battlesuite connected weapon system protcol

https://rheinmetall.github.io/onboardapi-documentation/9.10.0/index.html
223•summarity•13h ago•77 comments

Recreating Voodoo Graphics and a Late-1990s Gaming PC on an FPGA

https://nand2mario.github.io/posts/2026/zsst-voodoo/
129•zdw•11h ago•37 comments

A software thing I built: GPS on a 25MHz 486-SX

https://forum.vcfed.org/index.php?threads/a-software-thing-i-built-gps-on-a-25mhz-486-sx.1258966/
29•JPLeRouzic•4h ago•6 comments

Why I'm still bearish on LLMs after Navier-Stokes

https://dank.systems/posts/2026-09-15-ai-bear.html
233•jaykru•16h ago•261 comments

Better routing, probe fixes, plugin updates in Freenet/Hyphanet 0.7.5 build 1507

https://www.hyphanet.org/freenet-hyphanet-075-build-1507-fix-probe-routing-plugins-and-upkeep.html
5•ArneBab•2d ago•0 comments

Intelligence per Watt: Measuring Intelligence Efficiency of Local AI

https://arxiv.org/abs/2511.07885
42•pythonic_hell•2d ago•4 comments

MartyPC – A Cycle-Accurate IBM PC/XT Emulator

https://github.com/dbalsom/martypc
17•yitchelle•4h ago•2 comments

We got admin access to Baseten's production GitHub

https://www.strix.ai/blog/baseten-harbor-github-pat-takeover
281•bearsyankees•16h ago•155 comments

Datamimic – don't let your coding agent invent its own test world

https://github.com/rapiddweller/datamimic
40•ake2l•5h ago•6 comments

Show HN: Capsule – Single-file web apps that save their data into SQLite

https://withcapsule.app/
332•bashtian•20h ago•139 comments

Saving Jet Fuel

https://tech.marksblogg.com/scikit-decide-openap-optimal-flight-planning.html
95•marklit•11h ago•47 comments

Let's make quality the norm again

https://www.forbrukerradet.no/short-life/
395•ingve•1d ago•400 comments

Chopping up books when they're physically too big

https://attainablefelicity.mattkirkland.com/20260915/cut-up-your-books.html
179•matt_kirkland•15h ago•166 comments

Learning to solve hard problems in RL for LLMs by never giving up

https://mnoukhov.github.io/posts/ngu/
96•natolambert•15h ago•5 comments

Suspected sabotage causes major Netherlands rail disruption

https://www.bbc.com/news/articles/c8ly49w9g1edo
493•choult•1d ago•435 comments

An interactive world map of the stories cultures have told

https://originmap.sunnyguha.com/
49•momentmaker•2d ago•6 comments

The Beauty of Roundabouts

https://gruhn.me/blog/2026-09-14/
59•ngruhn•2d ago•124 comments

Jean-Pierre Serre turns 100

https://mathshistory.st-andrews.ac.uk/Biographies/Serre/
134•jzox•13h ago•24 comments

WangNet – 1.8 MB, zero-dependency Numberwang adjudication in 11 languages

https://github.com/GraafHenk/numberwang
163•Liogra123•14h ago•58 comments