frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Muse Spark 1.3

https://developer.meta.com/ai/models/muse-spark/
390•bvaldivielso•6h ago•255 comments

Gemini 3.8 Flash and 3.8 Flash Cyber

https://blog.google/innovation-and-ai/models-and-research/gemini-models/3-8-flash-and-3-8-flash-c...
824•bratao•10h ago•483 comments

Google avoids a breakup of its ad tech business

https://www.nytimes.com/2026/09/02/technology/google-ad-tech-remedies.html
265•donohoe•10h ago•176 comments

Holden's Lightning Flight

https://en.wikipedia.org/wiki/Holden%27s_Lightning_flight
53•ColinWright•2d ago•7 comments

Reverse Engineering Unknown File Formats with ImHex

https://werwolv.net/posts/file_format_reverse_engineering/
100•carlos-menezes•2d ago•19 comments

Fable 5.1 World Modeling

https://github.com/PhiloLabs/fable51-worlds
142•surreal_•5h ago•49 comments

Three sites made 215,128 “best software” pages for AI. Perplexity cites them

https://trellner.com/reports/manufactured-sources-behind-ai-recommendations/
309•jakobgreenfeld•11h ago•143 comments

Launch HN: RonanRX (YC S26) – Personalized Peptides and GLP-1s

https://ronanrx.com/
21•lloydarmbrust•3h ago•30 comments

Can I opt out of my input or output data being used for training?

https://help.mistral.ai/en/articles/455207-can-i-opt-out-of-my-input-or-output-data-being-used-fo...
370•teekert•13h ago•164 comments

Engineering of the fastest WebAssembly interpreters

https://wasmi-labs.github.io/blog/posts/wasmi-v2.0/
40•herobird•1d ago•1 comments

The shrinking landscape of linguistic diversity in the age of LLMs

https://www.nature.com/articles/s41562-026-02550-0
27•Anon84•3d ago•4 comments

Wendell Berry has died

https://www.nytimes.com/2026/08/31/us/wendell-berry-dead.html
139•Curiositry•1d ago•74 comments

Reasons robotics is hard

https://secondthoughts.ai/p/14-reasons-robotics-is-hard
33•ddp26•3h ago•5 comments

Biggest dark matter detector spots a single weird particle

https://www.science.org/content/article/world-s-biggest-dark-matter-detector-spots-single-weird-p...
248•randycupertino•11h ago•83 comments

Nango (YC W23) is hiring across eng, product and GTM (SF and remote)

https://nango.dev/careers
1•bastienbeurier•4h ago

Uber shuts operations in Nigeria and Uganda with immediate effect

https://www.bbc.com/news/articles/c86xpv8l9y9o
93•yakkomajuri•3h ago•56 comments

Qantas Airbus A380 engine failure in 2010 (2023)

https://admiralcloudberg.medium.com/a-matter-of-millimeters-the-story-of-qantas-flight-32-bdaa62d...
80•gumby•6h ago•48 comments

Whistleblower warns Postal Service mail ballot system has catastrophic problems

https://www.cbsnews.com/news/whistleblower-postal-service-new-mail-ballot-system/
69•ck2•1d ago•42 comments

Aging brains blend memories together instead of just forgetting them

https://studyfinds.com/aging-brains-blend-memories-together-instead-of-forgetting-them-study-finds/
211•mdp2021•12h ago•92 comments

Exit the Cave

https://turtlespace.blog/p/exit-the-cave
210•akkartik•11h ago•76 comments

Altair Basic Interpreter Source Code (1975) [pdf]

https://images.gatesnotes.com/12514eb8-7b51-008e-41a9-512542cf683b/34d561c8-cf5c-4e69-af47-3782ea...
39•Eridanus2•5h ago•20 comments

METR Report on OpenAI / Hugging Face Hacking Incident

https://metr.org/blog/2026-08-26-openai-hugging-face-incident-investigation/#core-takeaways-about...
85•stikit•2h ago•70 comments

Embedded Rust RTOS vs. C RTOS

https://tweedegolf.nl/en/blog/65/async-rust-vs-rtos-showdown/
54•kooi•7h ago•25 comments

A Selection of Los Alamos Rolodex Business Cards

https://clui.org/collections/los-alamos-business-cards/selection-cards
138•1970-01-01•2d ago•33 comments

Poisson Disk Sampling

https://stripeacross.com/posts/poisson-disk-sampling/
128•vismit2000•11h ago•19 comments

I wanna live an NPC life

https://signalundefied.bearblog.dev/i-wanna-live-an-npc-life/
181•conferza•5h ago•176 comments

Product Backlog Problems: Why Your Hierarchy Is Broken

https://www.prodpad.com/blog/backlog-hierarchy-problem/
15•adrianhoward•2d ago•8 comments

WebLLM: high-performance in-browser LLM inference engine

https://github.com/mlc-ai/web-llm
88•saikatsg•11h ago•17 comments

Making the Internet Boring

https://cemrehancavdar.com/2026/08/30/making-the-internet-boring/
77•zdw•3d ago•43 comments

We could save petabytes of cache storage with Zstandard and Pingora

https://blog.cloudflare.com/cache-transcoding/
65•torutofu•1d ago•29 comments