frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

“I just chose words carefully”

https://unsung.aresluna.org/i-just-chose-words-carefully/
615•zdw•8h ago•148 comments

P99 0 ms* autocomplete for 240M domain names

https://ruurtjan.com/articles/p99-0ms-autocomplete-for-240-million-domain-names
67•dbalatero•3h ago•30 comments

Creepy Crawlies

https://people.kernel.org/monsieuricon/creepy-crawlies
1063•zdw•1d ago•521 comments

Transfer files over an Ethernet patch cable

https://maurycyz.com/misc/etherfiles/
45•jllyhill•3h ago•29 comments

It takes 5 cloud services to hear my doorbell

https://blog.vghaisas.com/rube-goldberg-doorbell/
112•vghaisas•2d ago•78 comments

My hobby of building miniatures and taking pretty pictures

https://sandyuraz.com/blogs/tiny-cafe/
68•thecsw•2d ago•8 comments

Why OOP Exists

https://mathspp.com/blog/why-oop-exists
18•lumpa•3d ago•33 comments

Matrox: Graphics for Professionals

https://www.abortretry.fail/p/matrox
84•BirAdam•7h ago•24 comments

Highlighting My Code Based on How Much I Care

https://hank.bond/posts/highlighting-my-code-based-on-how-much-i-care/
12•hankbond•2d ago•2 comments

Haiku R1/beta6 has been released

https://www.haiku-os.org/news/2026-08-26_haiku_r1_beta6
302•metrofun•15h ago•89 comments

Understanding ChatGPT Work

https://simonwillison.net/2026/Aug/30/understanding-chatgpt-work/
139•gmays•5h ago•48 comments

OpenClaw 2.0, Accidentally

https://openclaw.ai/blog/openclaw-2-accidentally
61•doppp•3h ago•52 comments

A 12TB Steam "teraleak" spills more than a decade of lost PC gaming history

https://arstechnica.com/gaming/2026/08/a-12tb-steam-teraleak-spills-more-than-a-decade-of-lost-pc...
16•WithinReason•57m ago•0 comments

Internet centralization and the original sin of NAT

https://dreamstation.systems/personal/ntppost.html
44•robinpie•4h ago•23 comments

How to build a diffusion language model

https://kuleshov-group.github.io/blog/blog/2026/how-to-build-a-diffusion-language-model/
58•volodia•7h ago•4 comments

Cores in space: The core memory module from a 1980 Spacelab computer

https://www.righto.com/2026/08/spacelab-core-memory.html
101•pwg•11h ago•17 comments

Show HN: NFC Energy-Harvesting PCB Business Card with an MCU

https://wilsonharper.net/projects/businesscard/
149•WilsonHarper•2d ago•15 comments

Continuous Diffusion Language Models (CDLM's)

https://sander.ai/2026/08/24/continuous-dlms.html
83•peter_d_sherman•10h ago•33 comments

Sort branches by last commit date

https://ryangreenberg.com/til/git-branches-by-commit-date/
112•speckx•5d ago•42 comments

Hacking IKEA Furniture

https://greenlightning.eu/diy/hacking-ikea-furniture/
299•greenlightning•19h ago•207 comments

Why open source rocks – a new SM750 (Silicon Motion GPU) HDMI Driver

https://github.com/KodeMunkie/sm750hdmifb
98•SillyUsername•12h ago•35 comments

Relm4 makes developing beautiful cross-platform applications idiomatic

https://relm4.org/
30•Bluestein•4d ago•17 comments

Coordination Headwind: How Organizations Are Like Slime Molds

https://komoroske.com/slime-mold/
150•rzk•15h ago•45 comments

Startup Anti-Patterns

https://www.itamarnovick.com/intro-to-startup-anti-pattern-series/
142•rzk•15h ago•72 comments

Commercially Available Bike Generators Are Not Sustainable (2011)

https://solar.lowtechmagazine.com/2011/05/bike-powered-electricity-generators-are-not-sustainable/
43•baud147258•4d ago•39 comments

Show HN: Prove your code produced your claims without making reviewers rerun it

https://github.com/27-GROUP/kveritas-go/
9•Mkld27•4h ago•3 comments

How would you know whether an ancient culture had zero?

https://www.johndcook.com/blog/2026/08/21/ancient-number-system/
50•ibobev•3d ago•23 comments

Racter (1984)

https://www.ubu.com/historical/racter/index.html
22•buescher•2d ago•6 comments

Dad’s Custom Atari Peripherals

https://www.goto10retro.com/p/dads-custom-atari-peripherals
126•rbanffy•3d ago•16 comments

Arbitrary code execution in QubesOS via copy-to-VM error reporting backchannel

https://www.qubes-os.org/news/2026/08/29/qsb-118/
224•vntok•22h ago•89 comments