frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Cognition launches new SWE-2 model, Rivaling Fable 5.1 and GPT-Astra

https://cognition.com/blog/swe-2
279•seelos•5h ago•117 comments

More questions about whether researchers can trust OpenAI with unpublished math

https://mathstodon.xyz/@andreasthom/117240535270608201
426•pred_•14h ago•494 comments

NASA Color Trick Was Meant for Mars. Now It's Unveiling Rock Art on Earth

https://gizmodo.com/this-nasa-color-trick-was-meant-for-mars-now-its-unveiling-rock-art-on-earth-...
197•gumby•5h ago•33 comments

Don't let anyone take away your big box of cables

https://blog.jim-nielsen.com/2026/hands-off-my-cables/
151•Brajeshwar•5h ago•123 comments

Music Theory for the 21st-Century Classroom

https://musictheory.pugetsound.edu/mt21c/MusicTheory.html
87•aanet•3h ago•45 comments

Shopify moves back to Native from React Native

https://shopify.engineering/back-to-native
595•fnthawar2•7h ago•408 comments

Forgejo <=16.0.3 Critical RCE

https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/16.0.4.md
106•weierstass•5h ago•42 comments

Proof of Capture: Apple Reference Image, but open source and using steganography

https://merybenavente.me/blog/proof-of-capture
15•merybenavente•1h ago•4 comments

Rust is tier-1 language at Microsoft

https://rustfoundation.org/media/guest-post-rust-is-tier-1-language-at-microsoft/
535•mmastrac•7h ago•286 comments

Neki

https://planetscale.com/blog/introducing-neki
160•simon_weber•5h ago•65 comments

What happens when a GPU writes memory

https://blog.doubleword.ai/what-happens-when-a-gpu-writes-memory
16•ibobev•2d ago•0 comments

OpenAI Agents API

https://developers.openai.com/api/docs/guides/agents-api/overview
11•aquir•1h ago•2 comments

Hitachi launches CO2 heat pump water heaters with solar-friendly tariff controls

https://www.pv-magazine.com/2026/09/07/hitachi-launches-co2-heat-pump-water-heaters-with-solar-fr...
259•thelastgallon•1d ago•205 comments

JEP 544: Ahead-of-Time Code Compilation

https://openjdk.org/jeps/544
47•Skinney•3h ago•21 comments

DeepSeek v4.1 Flash

https://twitter.com/deepseek_ai/status/2097930608790167907
901•Liwink•15h ago•500 comments

Douglas Hofstadter: Analogy as the Core of Cognition [video]

https://www.youtube.com/watch?v=n8m7lFQ3njk
102•tosh•4d ago•59 comments

Silicon Valley Is Transforming the Military-Industrial Complex

https://costsofwar.watson.brown.edu/paper/how-big-tech-and-silicon-valley-are-transforming-milita...
118•paimapi•5h ago•182 comments

Creativity is the New Moat

https://www.inventbuild.studio/blog/genuine-creativity-is-your-new-moat
78•virgil_disgr4ce•2h ago•41 comments

Cognition's SWE-2 achieves 92.8 on Terminal-Bench 2.1

https://tokenstead.ai/models/swe-2
40•cdnsteve•4h ago•18 comments

What algorithm did Windows XP use to choose your initial user picture?

https://devblogs.microsoft.com/oldnewthing/20260909-00/?p=112683
319•soheilpro•12h ago•157 comments

Compute-efficient pretraining and scaling to trillion-parameter models

https://magic.dev/blog/pretraining#
103•ronfriedhaber•2d ago•56 comments

iPhone Duo

https://www.apple.com/iphone-duo/
1392•thecosmicfrog•1d ago•2409 comments

Schemy Lisp En DOS

https://sled.neocities.org/
69•AlexeyBrin•4d ago•12 comments

List of references on Sony websites to players "owning" their digital games

https://consumerrights.wiki/w/Sony_PlayStation_digital_game_ownership_lawsuit
319•haunter•8h ago•103 comments

Python sets and dictionaries can have quadratic-time performance

https://lemire.me/blog/2026/09/03/python-sets-and-dictionaries-can-have-quadratic-time-performance/
75•ibobev•2d ago•41 comments

Detecting and countering misuse of AI: September 2026

https://www.anthropic.com/threat-intelligence-report-september-2026
27•garo-pro•3h ago•11 comments

Stockfish 19

https://stockfishchess.org/blog/2026/stockfish-19/
249•atiedebee•3d ago•143 comments

Macbeth and His Problems

https://porticoquarterly.com/essay/macbeth-and-his-problems/
71•apophatic•3d ago•27 comments

To write non-fiction, draw the trunk, then the rest of the tree

https://devz.cl/posts/how-to-write/
75•DanielVZ•2d ago•27 comments

Show HN: DOOM in the kernel, or fibers in eBPF

https://ayles.github.io/doom-in-kernel/
28•ayles•1d ago•10 comments