frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Clef: Open-source decision models, and new RL fine-tuning platform

https://blog.cloudflare.com/clef-decision-models/
180•jasondavies•1h ago•62 comments

RIP, vector database

https://turbopuffer.com/blog/rip-vector-database
114•razin•2h ago•25 comments

StreetComplete on iOS is now in public beta

https://github.com/streetcomplete/StreetComplete/issues/5421
409•Snowly•7h ago•96 comments

RacketCon Is Saturday

https://con.racket-lang.org/
77•spdegabrielle•3h ago•20 comments

Ask HN: Who is hiring? (October 2026)

49•whoishiring•3h ago•50 comments

Cloudflare K2: serverless event streams

https://blog.cloudflare.com/cloudflare-k2-streams/
94•elffjs•3h ago•27 comments

How to speed up the Rust compiler in September 2026

https://nnethercote.github.io/2026/09/30/how-to-speed-up-the-rust-compiler-in-september-2026.html
179•trickypr•5h ago•87 comments

Identity Management for Agentic AI [pdf] (2025)

https://openid.net/wp-content/uploads/2025/10/Identity-Management-for-Agentic-AI.pdf
45•cgeier•2h ago•7 comments

Ask HN: Who wants to be hired? (October 2026)

34•whoishiring•3h ago•137 comments

Gemini 4 Argon

https://blog.google/innovation-and-ai/models-and-research/gemini-models/gemini-4-argon/
1601•bradleyg223•22h ago•1065 comments

Polyedergarten: Garden of Paper Polyhedron Models

https://www.polyedergarten.de/e_index.htm
28•isaacimagine•3h ago•3 comments

Various Projects Find Hidden SDR Capabilities in ESP32 Microcontrollers

https://www.rtl-sdr.com/various-projects-independently-find-hidden-sdr-capabilities-in-esp32-micr...
46•nkw•3h ago•0 comments

ParadeDB Search Performance Improvements

https://www.paradedb.com/blog/opening-a-closed-tin
27•craigkerstiens•1h ago•3 comments

Show HN: Open-source model routing for coding agents at Astra-level performance

11•adchurch•1d ago•1 comments

GPT-Synopsys: Frontier Intelligence to Revolutionize Chip Design

https://news.synopsys.com/2026-09-30-OpenAI-and-Synopsys-Announce-GPT-Synopsys-Frontier-Intellige...
139•giuliomagnifico•7h ago•72 comments

Lightweight PDF parser with layout, tables, formulas and bounding boxes

https://github.com/beatrizalmeidaf/papero-pdf-text-extractor
23•beatrizalmeidaf•1h ago•4 comments

Context Language Models

https://arxiv.org/abs/2609.37725
26•emersonmacro•3h ago•0 comments

Red Hat being phased out of existence?

https://techrights.org/n/2026/10/01/Red_Hat_Being_Phased_Out_of_Existence_Like_Many_Other_Compani...
102•amcclure•2h ago•49 comments

OpenDLSS: A Vulkan Reimplementation of Nvidia's DLSS 5 Neural Rendering Network

https://github.com/maanHimself/OpenDLSS-NR
219•sagacity•1d ago•102 comments

Cops Can Bypass iPhone's Automatic Reboot to Get into Locked Phones

https://www.404media.co/cops-can-bypass-iphone-automatic-inactivity-reboot-graykey/
153•speckx•3h ago•100 comments

Micron CEO Says Memory Supply Will Be Much Tighter in 2027 and 2028 Than in 2026

https://www.techpowerup.com/353296/micron-ceo-says-memory-supply-will-be-much-tighter-in-2027-and...
230•speckx•5h ago•273 comments

Figma restricts MCP access to whitelisted clients, excluding Pi

https://twitter.com/GayaniFigma/status/2105295629941350454
114•thdr•2h ago•61 comments

Truemetrics (YC S23) Is Hiring a GTM Founder's Associate

https://www.ycombinator.com/companies/truemetrics/jobs/THLEzXI-gtm-founder-s-associate
1•truemetricsIngo•8h ago

Git 3.0's upcoming SHA-256 default will be a costly mistake

https://blog.gitbutler.com/git-3-sha-256
87•chmaynard•1h ago•75 comments

Show HN: Vote on which of Hacker News' challenges for AI have been met

https://stoppels.ch/goalposts/
4•stabbles•36m ago•1 comments

Book of Shapes – Collection of minimal, generative and customizable SVG-patterns

https://bookofshapes.com/
215•eustoria•2d ago•16 comments

FTC is investigating OpenAI, Anthropic and other AI companies over product risks

https://www.cnbc.com/2026/09/30/ftc-ai-probe-openai-anthropic.html
160•dgellow•5h ago•102 comments

Returning from vacation? The government can search your phone without a warrant

https://arstechnica.com/tech-policy/2026/09/immigration-advocate-sues-border-agents-for-demanding...
286•rbanffy•6h ago•268 comments

Why the Bronze Age Collapsed

https://www.worksinprogress.news/p/why-really-caused-the-bronze-age
369•AnodicElegy•2d ago•249 comments

How to set up SPF, DKIM, and DMARC for your sending domain

https://mailfully.com/blog/spf-dkim-dmarc-setup
9•spy888•3h ago•0 comments