frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Astra can read and write weights to improve Qwen

https://rikiyat.github.io/blog/weight-space-programming/
1077•dbreunig•2h ago•339 comments

Show HN: Subvocal – Talk to your computer without making noise

371•aarushyadav•4h ago•225 comments

US boy names that became girl names and vice versa

https://namedaisy.com/blog/boy-names-that-became-girl-names
186•xoobdev•4h ago•208 comments

Launch HN: Momentic (YC W24) – Agents that catch bugs by using your app

https://momentic.ai/
93•wuweiweiwu•4h ago•59 comments

Show HN: Warsaw in voxels – An interactive 3D map of the city centre

https://p.migdal.pl/warsaw-vibe-voxel/
151•stared•4h ago•29 comments

If you love a website, back it up

https://blog.mistys-internet.website/post/2026/10/29/if-you-love-a-website-back-it-up/
273•ingve•7h ago•65 comments

Ask HN: Who is hiring? (November 2026)

129•whoishiring•5h ago•109 comments

SOML – A Config Format for Humans

https://github.com/soml-lang/soml
46•microflash•2h ago•34 comments

Let Me Ch...

https://blog.alxgsv.com/let-me-check/
155•alxgsv•3h ago•55 comments

Sneaking into the auditorium for the Windows 2000 launch rehearsal

https://devblogs.microsoft.com/oldnewthing/20261102-00/?p=112818/
61•ibobev•3h ago•19 comments

Skill to Create Product Videos

https://github.com/aaitor/skill-video-studio
29•aaitor•3h ago•7 comments

WTF Ubuntu?

https://chalmovsky.com/posts/wtf-ubuntu
1108•chalmovsky•6h ago•532 comments

Oracle files to sell $20B in new stock, bonds to finance AI buildout

https://www.cnbc.com/2026/11/02/oracle-files-to-sell-20-billion-in-new-stock-bonds-to-finance-ai-...
76•smartmic•1h ago•36 comments

Egoless Mathematics in the AI Era

https://terrytao.wordpress.com/2026/11/02/egoless-mathematics-in-the-ai-era/
55•smilelamp•2h ago•46 comments

Bitmovin (YC S15) Is Hiring Technical Graduates in Denver (Engineering/CS Focus)

https://bitmovin.com/careers/8660599002/
1•slederer•4h ago

Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks

https://freenode.net/article/ubuntu-lts-kernels-still-unfixed-for-critical-cve-2026-98432
115•majorchord•2h ago•16 comments

We halved DNS build delay and cut memory use by 85%

https://blog.cloudflare.com/dns-targeted-zone-builds/
111•wondersky•6h ago•32 comments

Anthropic reveals $900B AI spending commitments ahead of IPO

https://www.ft.com/content/4d91dbab-6fe4-45ab-beee-d77e091cb37f
58•zomtorg•1h ago•29 comments

Polyend releases the Tracker firmware source code

https://polyend.com/whats-up/tracker-the-biggest-update-yet/
23•austinallegro•3h ago•2 comments

LongCat-2.5: Native Multimodality for Agentic Tasks

https://longcat.ai/blog/longcat-2.5/
63•pretext•6h ago•20 comments

Making Peace with the Projective Plane

https://www.johndcook.com/blog/2026/11/02/projective-plane/
18•ibobev•3h ago•4 comments

My Favourite Laptop

https://blog.jsbarretto.com/post/laptop
123•ibobev•4h ago•89 comments

Anthropic's internal AI use, at retail prices, now exceeds its employee pay

https://www.businessinsider.com/anthropic-claude-internal-ai-use-exceeds-employee-pay-tokens-2026-11
236•entryleveljobsc•4h ago•180 comments

Agentic backdoors via pretraining poisoning

https://arxiv.org/abs/2610.37741
54•gmays•2h ago•13 comments

C64 Basic Dungeon Crawler: Stairs, Levels and Levelling Up (Part 11)

https://retrogamecoders.com/c64-basic-dungeon-part11/
41•ibobev•6h ago•8 comments

Moving our warehouse off DuckDB

https://posthog.com/blog/moving-off-duckdb
133•emschwartz•5h ago•96 comments

The U.S. Census Bureau and "Super Intelligence"

https://simonwillison.net/2026/Nov/2/census-bureau-super-intelligence/
73•torutofu•7h ago•31 comments

Bones may release proteins that slow aging and extend life span

https://www.science.org/content/article/bones-may-release-proteins-slow-aging-and-extend-life-span
305•EA-3167•19h ago•119 comments

Show HN: I've updated my Linux System Call website and API

https://syscall.sh/
186•guitmz•11h ago•47 comments

Supermarket freezers across Europe hit by second suspected cyber-attack

https://www.theguardian.com/world/2026/nov/02/supermarket-freezers-across-europe-hit-by-second-su...
319•fergie•9h ago•368 comments