frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•10mo ago

Comments

steele•10mo ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•10mo ago
Lmao, gentrify cracked me up
neilv•10mo ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•10mo ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•10mo ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•10mo ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•10mo ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•10mo ago
May as well just release an executable tbh.
theamk•10mo ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•10mo ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•10mo ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

PC Gamer recommends RSS readers in a 37mb article that just keeps downloading

https://stuartbreckenridge.net/2026-03-19-pc-gamer-recommends-rss-readers-in-a-37mb-article/
197•JumpCrisscross•4h ago•80 comments

The gold standard of optimization: A look under the hood of RollerCoaster Tycoon

https://larstofus.com/2026/03/22/the-gold-standard-of-optimization-a-look-under-the-hood-of-rolle...
90•mariuz•3h ago•24 comments

Rust Project Perspectives on AI

https://nikomatsakis.github.io/rust-project-perspectives-on-ai/feb27-summary.html
10•weinzierl•15m ago•0 comments

The future of version control

https://bramcohen.com/p/manyana
334•c17r•7h ago•184 comments

GrapheneOS will remain usable by anyone without requiring personal information

https://grapheneos.social/@GrapheneOS/116261301913660830
19•nothrowaways•1h ago•2 comments

Reports of code's death are greatly exaggerated

https://stevekrouse.com/precision
176•stevekrouse•11h ago•171 comments

LLMs Predict My Coffee

https://dynomight.net/coffee/
31•surprisetalk•4d ago•10 comments

Project Nomad – Knowledge That Never Goes Offline

https://www.projectnomad.us
325•jensgk•10h ago•80 comments

Five Years of Running a Systems Reading Group at Microsoft

https://armaansood.com/posts/systems-reading-group/
88•Foe•5h ago•23 comments

Flash-MoE: Running a 397B Parameter Model on a Laptop

https://github.com/danveloper/flash-moe
279•mft_•11h ago•98 comments

MAUI Is Coming to Linux

https://avaloniaui.net/blog/maui-avalonia-preview-1
129•DeathArrow•6h ago•56 comments

Windows native app development is a mess

https://domenic.me/windows-native-dev/
282•domenicd•12h ago•308 comments

Building an FPGA 3dfx Voodoo with Modern RTL Tools

https://noquiche.fyi/voodoo
141•fayalalebrun•9h ago•26 comments

What Young Workers Are Doing to AI-Proof Themselves

https://www.wsj.com/economy/jobs/ai-jobs-young-people-careers-14282284
42•wallflower•4h ago•38 comments

Theodosian Land Walls of Constantinople

https://turkisharchaeonews.net/object/theodosian-land-walls-constantinople
5•bcraven•3d ago•0 comments

Palantir extends reach into British state as gets access to sensitive FCA data

https://www.theguardian.com/technology/2026/mar/22/palantir-extends-reach-into-british-state-as-i...
136•chrisjj•4h ago•39 comments

OpenClaw is a security nightmare dressed up as a daydream

https://composio.dev/content/openclaw-security-and-vulnerabilities
250•fs_software•4h ago•172 comments

Show HN: Codala, a social network built on scanning barcodes

https://play.google.com/store/apps/details?id=com.hsynkrkye.codala&hl=en
14•hsynkrkye•4d ago•7 comments

More common mistakes to avoid when creating system architecture diagrams

https://www.ilograph.com/blog/posts/more-common-diagram-mistakes/
123•billyp-rva•10h ago•49 comments

Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2

https://radar.cloudflare.com/domains/domain/archive.today
345•winkelmann•18h ago•254 comments

How to Attract AI Bots to Your Open Source Project

https://nesbitt.io/2026/03/21/how-to-attract-ai-bots-to-your-open-source-project.html
37•zdw•1d ago•5 comments

Teaching Claude to QA a mobile app

https://christophermeiklejohn.com/ai/zabriskie/development/android/ios/2026/03/22/teaching-claude...
46•azhenley•3h ago•2 comments

Vectorization of Verilog Designs and its Effects on Verification and Synthesis

https://arxiv.org/abs/2603.17099
13•matt_d•3d ago•1 comments

25 Years of Eggs

https://www.john-rush.com/posts/eggs-25-years-20260219.html
232•avyfain•4d ago•66 comments

A review of dice that came with the white castle

https://boardgamegeek.com/thread/3533812/a-review-of-dice-that-came-with-the-white-castle
118•doener•3d ago•36 comments

The IBM scientist who rewrote the rules of information just won a Turing Award

https://www.ibm.com/think/news/ibm-scientist-charles-bennett-turing-award
81•rbanffy•10h ago•6 comments

GrapheneOS refuses to comply with new age verification laws for operating system

https://www.tomshardware.com/software/operating-systems/grapheneos-refuses-to-comply-with-age-ver...
167•CrypticShift•6h ago•76 comments

Why I love NixOS

https://www.birkey.co/2026-03-22-why-i-love-nixos.html
143•birkey•5h ago•115 comments

Brute-forcing my algorithmic ignorance

http://blog.dominikrudnik.pl/my-google-recruitment-journey-part-1
87•qikcik•10h ago•52 comments

Show HN: Revise – An AI Editor for Documents

https://revise.io
56•artursapek•9h ago•48 comments