frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•11mo ago

Comments

steele•11mo ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•11mo ago
Lmao, gentrify cracked me up
neilv•11mo ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•11mo ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•11mo ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•11mo ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•11mo ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•11mo ago
May as well just release an executable tbh.
theamk•11mo ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•11mo ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•11mo ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Hardware Attestation as Monopoly Enabler

https://grapheneos.social/@GrapheneOS/116550899908879585
707•ChuckMcM•5h ago•263 comments

Local AI needs to be the norm

https://unix.foo/posts/local-ai-needs-to-be-norm/
397•cylo•6h ago•208 comments

Incident Report: CVE-2024-YIKES

https://nesbitt.io/2026/02/03/incident-report-cve-2024-yikes.html
332•miniBill•5h ago•83 comments

Obsidian plugin was abused to deploy a remote access trojan

https://cyber.netsecops.io/articles/obsidian-plugin-abused-in-campaign-to-deploy-phantom-pulse-rat/
22•cmbailey•1h ago•5 comments

Why modern parents feel more sleep deprived than our ancestors did

https://www.bbc.com/future/article/20260508-parents-in-ancient-times-felt-less-sleep-deprived-wha...
49•1659447091•1h ago•17 comments

Ask HN: What are you working on? (May 2026)

101•david927•5h ago•358 comments

First tunnel element of the Fehmarnbelt Tunnel immersed

https://www.arup.com/en-us/news/first-fehmarnbelt-tunnel-element-lowered/
18•robin_reala•3d ago•3 comments

Traces Of Humanity

https://tracesofhumanity.org/hello-world/
115•alex77456•6h ago•19 comments

Maryland citizens hit with $2B power grid upgrade for out-of-state AI

https://www.tomshardware.com/tech-industry/artificial-intelligence/maryland-citizens-slapped-with...
79•lemonberry•2h ago•26 comments

I returned to AWS and was reminded why I left

http://fourlightyears.blogspot.com/2026/05/i-returned-to-aws-and-was-reminded-hard.html
620•andrewstuart•1d ago•458 comments

Stop MitM on the first SSH connection, on any VPS or cloud provider

https://www.joachimschipper.nl/Stop%20MITM%20on%20the%20first%20SSH%20connection,%20on%20any%20VP...
61•JoachimSchipper•2d ago•32 comments

Eight More 8-bit Era Microprocessors (2024)

https://thechipletter.substack.com/p/eight-more-8-bit-era-microprocessors
41•klelatti•2d ago•11 comments

Guy Goma's Accidental BBC Interview Lives on After 20 Years

https://www.nytimes.com/2026/05/06/business/media/bbc-guy-goma-interview.html
11•nxobject•2d ago•4 comments

The locals don't know

https://www.quarter--mile.com/The-Locals-Dont-Know
76•herbertl•7h ago•54 comments

Lakebase architecture delivers faster Postgres writes

https://www.databricks.com/blog/how-lakebase-architecture-delivers-5x-faster-postgres-writes
84•sp_from_db•2d ago•24 comments

The people preserving the scientific practice of bird banding

https://thenarwhal.ca/bird-banding-ontario/
13•bookofjoe•2d ago•0 comments

Idempotency is easy until the second request is different

https://blog.dochia.dev/blog/idempotency/
270•ludovicianul•3d ago•171 comments

What's a mathematician to do? (2010)

https://mathoverflow.net/questions/43690/whats-a-mathematician-to-do
137•ipnon•12h ago•70 comments

Louis Rossmann offers to pay legal fees for a threatened OrcaSlicer developer

https://www.tomshardware.com/3d-printing/louis-rossmann-tells-3d-printer-maker-bambu-lab-to-go-bl...
430•iancmceachern•8h ago•232 comments

Walking slower? Your ears, not your knees, might be the problem

https://www.wsj.com/health/wellness/hearing-loss-walking-speed-iphone-study-c53c482a
76•marc__1•1d ago•55 comments

Show HN: An index of indie web/blog indexes

https://theindex.fyi
87•rocketpastsix•10h ago•25 comments

Think Linear Algebra (2023)

https://allendowney.github.io/ThinkLinearAlgebra/index.html
149•tamnd•13h ago•17 comments

Space Cadet Pinball on Linux

https://brennan.io/2026/05/09/pinball-and-escrow/
304•jandeboevrie•12h ago•101 comments

Task Paralysis and AI

https://g5t.de/articles/20260510-task-paralysis-and-ai/index.html
178•MrGilbert•17h ago•101 comments

Spain has become one of Europe’s cheapest power markets

https://janrosenow.substack.com/p/spain-just-became-one-of-europes
133•marc__1•6h ago•109 comments

9 Mothers (YC P26) Is Hiring

https://jobs.ashbyhq.com/9-mothers?utm_source=x8pZ4B3P3Q
1•ukd1•11h ago

Plex's price hikes prove I was right to switch to Jellyfin

https://www.androidauthority.com/plex-price-hikes-get-jellyfin-3663600/
14•Brajeshwar•1h ago•7 comments

Shunting-Yard Animation

https://somethingorotherwhatever.com/shunting-yard-animation/
54•s1291•8h ago•15 comments

YC's Biggest Scandals

https://ycombinator.fyi/
208•laserduck•6h ago•75 comments

A recent experience with ChatGPT 5.5 Pro

https://gowers.wordpress.com/2026/05/08/a-recent-experience-with-chatgpt-5-5-pro/
683•_alternator_•1d ago•510 comments