frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

bzip3

https://github.com/iczelia/bzip3
191•tosh•4h ago•63 comments

Keep Our Servers Running

https://blog.archive.org/2026/09/01/keep-our-servers-running-your-recurring-donation-goes-3x-this...
796•sonicrocketman•14h ago•201 comments

Caltech Mathathon – first hackathon ever devoted to research level mathematics

https://mathathonchallenge.com/index.html
150•astroanax•8h ago•35 comments

Simple Is Not Small

https://jyn.dev/simple-is-not-the-same-as-small/
77•zdw•3d ago•23 comments

Tell HN: OpenAI brings back 5 hour limit for plus and business standard users

35•spwa4•58m ago•15 comments

Live map of public transport in Belgium

https://openbaarvervoerbelgie.be/
144•coinfused•8h ago•62 comments

LG smart TVs caught logging audio with screen off and snooping on local devices

https://www.notebookcheck.net/LG-smart-TVs-caught-logging-audio-with-screen-off-and-snooping-on-l...
934•chris_overseas•10h ago•441 comments

De-Brainrot Vacations

https://devz.cl/posts/i-spent-my-vacations-de-brainrotting/
392•DanielVZ•4h ago•162 comments

Bing Wallpaper showing Ad for Harry Potter and Fantastic beasts box set

https://www.thurrott.com/forums/microsoft/windows/thread/bing-wallpaper-showing-ad-for-harry-pott...
59•neogodless•1h ago•29 comments

The Dataflow Model Revisited

https://www.vldb.org/pvldb/volumes/19/paper/The%20Dataflow%20Model%20Revisited
23•scott_s•23h ago•6 comments

Speculative Decoding in vLLM on AMD GPUs

https://vllm.ai/blog/2026-08-23-speculative-decoding-amd-gpus
100•ankitg12•8h ago•33 comments

Smartphone makers don't bother to comply with EU repairability requirements

https://www.theregister.com/personal-tech/2026/09/07/smartphone-makers-dont-bother-to-comply-with...
205•mdp2021•5h ago•121 comments

Decoding the NEC V20 Microcode

https://martypc.blogspot.com/2026/09/decoding-nec-v20-microcode.html
18•mariuz•3d ago•0 comments

Whistle Synth

https://www.jefftk.com/p/whistle-synth-mac-app
21•luu•3d ago•6 comments

Bill Gates tries to install MovieMaker

https://www.techemails.com/p/bill-gates-tries-to-install-movie-maker
89•highfrequency•2h ago•55 comments

Splash-free urinals (2025)

https://academic.oup.com/pnasnexus/article/4/4/pgaf087/8098745?login=false
177•u1hcw9nx•4h ago•96 comments

Impedance Matching (2017)

https://www.edge.org/response-detail/27238
63•muti•7h ago•20 comments

Ask HN: Fable hacked my piano, can I release the results?

246•jmpman•2d ago•141 comments

Making a Python interpreter in 1024 bytes

https://austinhenley.com/blog/python1024.html
293•azhenley•18h ago•101 comments

Unified Arabic

https://worksthatwork.com/6/unified-arabic
98•spacebuffer•4d ago•34 comments

It took a year to ship WebAssembly in Anubis

https://anubis.techaro.lol/blog/2026/anubis-wasm/
335•xena•21h ago•168 comments

Ask HN: How do you manage skills files?

255•imadtaieber•22h ago•236 comments

Tiny $70 Xteink X3 e-reader

https://www.theatlantic.com/technology/2026/09/xteink-e-reader-best-technology-years/688539/
158•samizdis•6h ago•159 comments

I Connected My Withings Body+ to Home Assistant with an ESP32

https://didac.dev/blog/i-made-my-withings-scale-sync-to-home-assistant-without-the-cloud
64•sabatesduran•4d ago•19 comments

GrapheneOS Overhauled Default Apps and Secure Clipboard

https://grapheneos.social/@GrapheneOS/117225539756835649
378•Cider9986•21h ago•239 comments

Apparently CodePen 2.0 sends data to their servers as you type

92•maxim-fin•6h ago•39 comments

Nördlinger Ries Impact Crater

https://en.wikipedia.org/wiki/Nördlinger_Ries
10•cromulent•1h ago•1 comments

VMware migration reduces Tottenham Hotspur's licensing fees by 85 percent

https://arstechnica.com/information-technology/2026/09/vmware-migration-reduces-tottenham-hotspur...
80•joozio•6h ago•36 comments

Is mathematics about to enter the conservatory?

https://mbmccoy.dev/posts/mathematical-conservatory/
107•_alternator_•18h ago•125 comments

If a Tesla Cybercab fleet were profitable, Tesla wouldn't sell you one

https://electrek.co/2026/09/07/tesla-cybercab-fleet-profitable-wouldnt-sell/
54•jijojv•2h ago•48 comments