frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Newgrounds.com – A community of games, music, and art

https://www.newgrounds.com/
73•azhenley•2h ago•14 comments

The Forgetful CPU (Linux on M4)

https://yuka.dev/blog-2026-10-02-linux-m4.html
146•signa11•13h ago•64 comments

Court agrees with EFF: Utah's VPN law demands a technical impossibility

https://www.eff.org/deeplinks/2026/10/court-agrees-eff-utahs-vpn-law-demands-technical-impossibility
547•hn_acker•1d ago•239 comments

Things that apparently cause cancer

https://www.breakthroughjournal.org/p/things-that-apparently-cause-cancer
116•timpera•3h ago•50 comments

Mike Tomlin spent 12 years building a Minecraft city

https://www.nytimes.com/athletic/7648198/2026/10/01/mike-tomlin-minecraft-nfl-coach/
349•CoryOndrejka•1d ago•90 comments

A 12-year sequence of telescope images of a star and four planets orbiting

https://bsky.app/profile/theplanetaryguy.com/post/3mwucf5ert22f
222•mariuz•16h ago•50 comments

NTSB Preliminary Report: Prime Air 767 Runway Overrun [pdf]

https://www.ntsb.gov/investigations/Documents/DCA26MA352%20Prelim.pdf
23•sdko•2h ago•9 comments

Apple Pass Designer

https://developer.apple.com/pass-designer/
347•soheilpro•8h ago•225 comments

With most information hidden, the game Stratego had stumped AI until now

https://arstechnica.com/science/2026/10/ai-finally-beat-the-best-stratego-player-in-history-and-d...
193•PaulHoule•13h ago•93 comments

Loss of cell identity drives human aging: Two new papers

https://erictopol.substack.com/p/loss-of-cell-identity-drives-human
197•bookofjoe•1d ago•51 comments

Muse Gadgets

https://gadgets.muse.ai
152•anant•8h ago•73 comments

From the creator of Redis; run LLM locally with ds4

https://dwarfstar.sh/
179•fibo•9h ago•45 comments

Greg Kroah-Hartman – Security in the LLM Age [video]

https://www.youtube.com/watch?v=NnV_cWeoo5Q
194•usernomdeguerre•1d ago•52 comments

OKI Develops 124-Layer PCB Technology

https://www.oki.com/global/press/2025/z25006e.html
8•luu•1d ago•1 comments

FLUX 3 Image

https://bfl.ai/models/flux-3-image
291•minimaxir•1d ago•62 comments

Updates to Full Disk Access in macOS

https://developer.apple.com/news/?id=p6zjojqw
146•notfirstpost•8h ago•88 comments

Billions of Triangles Redux

https://zeux.io/2026/09/30/billions-of-triangles-redux/
22•ibobev•2d ago•0 comments

Where Is the Planet

http://whereistheplanet.com
14•andsoitis•3h ago•0 comments

Show HN: Made an open-source Lego AI generator

https://github.com/anteloc/ldraw-nova
80•antelocnova•7h ago•41 comments

Sites in ChatGPT

https://chatgpt.com/features/sites/
229•polvi•1d ago•228 comments

The Legend of von Neumann (1973) [pdf]

https://gwern.net/doc/math/1973-halmos.pdf
256•suopspaces•14h ago•142 comments

There's a New Sea Spider in Town

https://nautil.us/theres-a-new-sea-spider-in-town-1285470
4•whiteblossom•10h ago•0 comments

Show HN: Giving Opus 5.5 a simulated paint canvas

https://stillwet.art/
224•alstonite•1d ago•75 comments

Venice’s failed war against Constantinople led to the first bond market

https://bigthink.com/books/a-fabulous-debt/
88•RickJWagner•14h ago•26 comments

One month coding with GLM 5.3 Flash

https://wagtail.org/blog/one-month-on-glm-53-flash/
128•ThibWeb•12h ago•101 comments

Our Project Suncatcher prototype satellite is in orbit

https://blog.google/innovation-and-ai/models-and-research/google-research/project-suncatcher-prot...
53•pantalaimon•16h ago•53 comments

Every SaaS business will become a harness around a model

https://blog.sshh.io/p/the-harness-is-the-company
116•iacguy•6h ago•85 comments

Anatomy of a Lean proof for software engineers

https://agostbiro.net/posts/2026-10-anatomy-of-a-lean-proof/
91•abiro•1d ago•18 comments

Blogging with Gleam, Org-Mode and Pandoc

https://byzantine-systems.github.io/blogging-with-gleam-org-mode-and-pandoc/
66•schonfinkel•16h ago•13 comments

The first packet sent via RFC1149 avian carrier is up for auction at Christie's

https://onlineonly.christies.com/s/fine-printed-books-manuscripts-science/carrier-pigeon-internet...
54•peter_hansteen•15h ago•12 comments