frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

LLMs reward expertise

https://www.seangoedecke.com/llms-reward-expertise/
397•MaxMussio•4h ago•181 comments

Ten advances in mathematics and theoretical computer science

https://openai.com/index/ten-advances-in-mathematics/
418•milkshakes•8h ago•699 comments

Ask HN: Who is hiring? (August 2026)

94•whoishiring•10h ago•98 comments

Devtools must be open source

https://blog.exe.dev/devtools-must-be-open-source
495•bryanmikaelian•11h ago•177 comments

Amazonian civilization had estimated 3M people in 3% of forest area

https://www.science.org/content/article/odd-shapes-hidden-dense-amazon-rainforest-reveal-sprawlin...
9•marojejian•5d ago•3 comments

Windows XP 2002 for the Itanium: Unbridled rage

https://virtuallyfun.com/2026/08/03/windows-xp-2002-for-the-itanium-unbridled-rage/
47•jandeboevrie•3h ago•19 comments

Ask HN: Who wants to be hired? (August 2026)

46•whoishiring•10h ago•169 comments

Smaller, faster, safer: running Kimi and GLM at scale

https://blog.cloudflare.com/smaller-faster-safer-models/
140•ascorbic•8h ago•38 comments

MiniMax H3 Day-0 Support in ComfyUI: Open Weights, Native Audio, and 2K Video

https://blog.comfy.org/p/minimax-h3-day-0-support-in-comfyui
249•vblanco•11h ago•79 comments

Celebrating 45 Years of Kermit with the First New C-Kermit Release in 15 Years

https://changelog.complete.org/archives/44456-celebrating-45-years-of-kermit-with-the-first-new-c...
122•roryirvine•8h ago•35 comments

Prevent cognitive debt by manually retyping LLM-generated code

https://ankursethi.com/blog/prevent-cognitive-debt-by-manually-retyping-llm-generated-code/
380•mpweiher•15h ago•319 comments

200 Milliseconds

https://200ms.thenodebook.com
183•dimitarpanov•2d ago•58 comments

Andy Pavlo joins ClickHouse to establish ClickHouse Labs

https://clickhouse.com/blog/andy-pavlo-joins-clickhouse
269•nikolay_sivko•11h ago•56 comments

Replacing the Kobo Libra H2O Battery

https://ei3lh.eu/2025/11/20/replacing-the-kobo-libra-h2o-battery/
44•austinallegro•4d ago•12 comments

Launch HN: Hoplite (YC S26) – Effortlessly deploy cloud coding agents

https://hoplite.sh
57•BenceRed•8h ago•50 comments

Frame selection is the whole game: notes on making LLMs watch video

https://leoaido.com/how-llms-watch-video/
7•cortexosmain•11h ago•0 comments

ZX Spectrum System Tour: Text Mode

https://bumbershootsoft.wordpress.com/2026/05/30/zx-spectrum-system-tour-text-mode/
16•rbanffy•3h ago•0 comments

How Hollywood stopped making movies in Hollywood

https://www.statsignificant.com/p/how-hollywood-stopped-making-movies
164•speckx•6d ago•189 comments

The Dunning-Kruger effect may just be a data artefact (2020)

https://www.mcgill.ca/oss/article/critical-thinking/dunning-kruger-effect-probably-not-real
119•audreyfei•5h ago•125 comments

Bonsai: Janestreet's UI Library

https://github.com/janestreet/bonsai
299•KolmogorovComp•16h ago•125 comments

AirLLM 70B inference with single 4GB GPU

https://github.com/lyogavin/airllm
185•Anon84•14h ago•75 comments

Decades-old fish sauce at abandoned factory in Canada finally being removed

https://defector.com/abandoned-fish-sauce-canada-interview
194•ohjeez•3d ago•207 comments

They Forgot What Happened Last Time: Hacking the Windows 365 Link [video]

https://media.ccc.de/v/emf2026-93-1-they-forgot-what-happened-last-time
8•Jimmc414•3d ago•0 comments

KisakCOD – open-source reimplementation of Call of Duty 4 Multiplayer

https://github.com/SwagSoftware/KisakCOD
35•skibz•6h ago•3 comments

Twenty Years of Pandoc

https://pandoc.org/twenty-years-of-pandoc.html
101•fiddlosopher•10h ago•13 comments

Massively Parallel Postgres Backups

https://planetscale.com/blog/massively-parallel-postgres-backups
85•ksec•3d ago•11 comments

Kelly Criterion Simulator

https://kellysimulator.com/
55•aleyan•3d ago•25 comments

Battle of the Beams

https://en.wikipedia.org/wiki/Battle_of_the_Beams
28•petethomas•2d ago•7 comments

The Billable Usage API: programmatic cost visibility for Cloudflare

https://blog.cloudflare.com/billable-usage-api/
43•ashleypeacock•8h ago•7 comments

What's the largest software project AI can complete on its own?

https://epoch.ai/MirrorCode
66•yusufozkan•9h ago•74 comments