frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•6mo ago

Comments

steele•6mo ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•6mo ago
Lmao, gentrify cracked me up
neilv•6mo ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•6mo ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•6mo ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•6mo ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•6mo ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•6mo ago
May as well just release an executable tbh.
theamk•6mo ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•6mo ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•6mo ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Nano Banana Pro

https://blog.google/technology/ai/nano-banana-pro/
289•meetpateltech•1h ago•198 comments

Red Alert 2 in web browser

https://chronodivide.com/
217•nsoonhui•4h ago•70 comments

The Banished Bottom of the Housing Market

https://www.ryanpuzycki.com/p/the-banished-bottom-of-the-housing
51•barry-cotter•1h ago•14 comments

Interactive World History Atlas Since 3000 BC

http://geacron.com/home-en/
207•not_knuth•7h ago•97 comments

Firefox 147 Will Support the XDG Base Directory Specification

https://www.phoronix.com/news/Firefox-147-XDG-Base-Directory
158•bradrn•2h ago•48 comments

Freer Monads, More Extensible Effects [pdf]

https://okmij.org/ftp/Haskell/extensible/more.pdf
12•todsacerdoti•1h ago•0 comments

Android/Linux Dual Boot

https://wiki.postmarketos.org/wiki/Dual_Booting/WiP
221•joooscha•3d ago•117 comments

40 years ago, Calvin and Hobbes' burst onto the page

https://www.npr.org/2025/11/18/nx-s1-5564064/calvin-and-hobbes-bill-watterson-40-years-comic-stri...
241•mooreds•4h ago•78 comments

Theft of the Weeping Woman from the National Gallery of Victoria

https://en.wikipedia.org/wiki/Theft_of_The_Weeping_Woman_from_the_National_Gallery_of_Victoria
17•neom•5d ago•4 comments

CUDA Ontology

https://jamesakl.com/posts/cuda-ontology/
196•gugagore•3d ago•30 comments

Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in LLMs

https://arxiv.org/abs/2511.15304
136•capgre•4h ago•88 comments

Judgement on Dr Matthew Garrett (@mjg59) vs. Dr Roy Schestowitz (Techrights.org)

https://caselaw.nationalarchives.gov.uk/ewhc/kb/2025/3063
68•jonty•3h ago•47 comments

Basalt Woven Textile

https://materialdistrict.com/material/basalt-woven-textile/
168•rbanffy•11h ago•94 comments

Europe is scaling back GDPR and relaxing AI laws

https://www.theverge.com/news/823750/european-union-ai-act-gdpr-changes
881•ksec•1d ago•1009 comments

Towards Interplanetary QUIC Traffic

https://ochagavia.nl/blog/towards-interplanetary-quic-traffic/
77•wofo•2d ago•18 comments

Smart Performance Hacks for Faster Python Code

https://blog.jetbrains.com/pycharm/2025/11/10-smart-performance-hacks-for-faster-python-code/
41•ashvardanian•1w ago•12 comments

DOS Days – Laptop Displays

https://www.dosdays.co.uk/topics/laptop_displays.php
61•nullbyte808•7h ago•12 comments

Meta Segment Anything Model 3

https://ai.meta.com/sam3/
603•lukeinator42•23h ago•122 comments

IBM Delivers New Quantum Package

https://newsroom.ibm.com/2025-11-12-ibm-delivers-new-quantum-processors,-software,-and-algorithm-...
7•donutloop•1w ago•0 comments

Loose wire leads to blackout, contact with Francis Scott Key bridge

https://www.ntsb.gov:443/news/press-releases/Pages/NR20251118.aspx
402•DamnInteresting•20h ago•187 comments

The lost cause of the Lisp machines

https://www.tfeb.org/fragments/2025/11/18/the-lost-cause-of-the-lisp-machines/
122•enbywithunix•21h ago•120 comments

Scientists Reveal How the Maya Predicted Eclipses for Centuries

https://www.sciencealert.com/scientists-reveal-how-the-maya-predicted-eclipses-for-centuries
53•rguiscard•6d ago•15 comments

Researchers discover security vulnerability in WhatsApp

https://www.univie.ac.at/en/news/detail/forscherinnen-entdecken-grosse-sicherheitsluecke-in-whatsapp
288•KingNoLimit•19h ago•113 comments

Verifying your Matrix devices is becoming mandatory

https://element.io/blog/verifying-your-devices-is-becoming-mandatory-2/
170•LorenDB•16h ago•194 comments

Wrapping my head around AI wrappers

https://www.wreflection.com/p/wrapping-my-head-around-ai-wrappers
28•nowflux•4d ago•18 comments

Building more with GPT-5.1-Codex-Max

https://openai.com/index/gpt-5-1-codex-max/
459•hansonw•22h ago•284 comments

New Proofs Probe Soap-Film Singularities

https://www.quantamagazine.org/new-proofs-probe-soap-film-singularities-20251112/
32•pseudolus•1w ago•2 comments

A surprise with how '#!' handles its program argument in practice

https://utcc.utoronto.ca/~cks/space/blog/unix/ShebangRelativePathSurprise
93•SeenNotHeard•1d ago•81 comments

Precise geolocation via Wi-Fi Positioning System

https://www.amoses.dev/blog/wifi-location/
230•nicosalm•18h ago•95 comments

Details about the shebang/hash-bang mechanism on various Unix flavours (2001)

https://www.in-ulm.de/%7Emascheck/various/shebang/
66•js2•11h ago•14 comments