frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Muse – Meta’s personal AI agent

https://ai.meta.com/muse/
320•yks•6h ago•315 comments

Large language models develop novel social biases through adaptive exploration

https://openreview.net/challenge?redirect=%2Fforum%3Fid%3Dpc7fqaOcAH
93•paimapi•4h ago•49 comments

How to build a printer

https://nishantjosh.dev/blogs/how-to-build-a-fking-printer/
143•cat-whisperer•4h ago•33 comments

Navier-Stokes – Tristan Buckmaster [pdf]

https://cims.nyu.edu/~tristanb/statement.pdf
1270•procedurecall•20h ago•552 comments

AlphaGenome Atlas: a high-resolution map of human DNA

https://blog.google/innovation-and-ai/models-and-research/google-deepmind/alphagenome-atlas/
495•utiiiD•11h ago•115 comments

DaVinci Resolve 21.1

https://www.blackmagicdesign.com/media/release/20260908-03
354•tosh•12h ago•157 comments

On the Navier–Stokes Millennium Prize Problem

https://openai.com/index/navier-stokes-solution/
1127•tedsanders•8h ago•973 comments

Benchmarking Qwen3.8 27B quantizations: 4-bit holds up, 1-bit collapses

https://quesma.com/blog/qwen38-27b-quantizations-benchmarked/
217•stared•11h ago•107 comments

The Microeconomics of Artificial Intelligence (2025)

https://direct.mit.edu/books/oa-monograph/6067/The-Microeconomics-of-Artificial-Intelligence
31•neehao•2d ago•9 comments

Tao: Open math problems being non-renewably mined by AI

https://mathstodon.xyz/@tao/117237320796901560
150•_alternator_•5h ago•95 comments

27.5KB language-agnostic WebGPU syntax highlighter

https://gpu-lexer.vercel.app/
7•bpierre•49m ago•0 comments

I-have-ADHD: A skill to stop coding agents from burying the answer

https://github.com/ayghri/i-have-adhd
324•domhudson•11h ago•256 comments

Kimi K3 (2.8T) at 1 token/s on a MacBook Pro, streamed from four SSDs

https://github.com/argonautlabsai/deltafin
211•Argonautlabs•5h ago•112 comments

Getting phpBB 1.4.4 working in Docker

https://www.thran.uk/writ/devlog/2026/09/phpbb-144-in-docker.html
25•HeckFeck•1d ago•8 comments

A Topological Picture Book, Rendered

https://e-infinity.space/picture-book/
54•mathgenius•3h ago•7 comments

Ask HN: 3.5 inch diskette read errors, would a period correct drive do better?

11•rietta•1d ago•12 comments

Animation in Bevy: The Big Picture

https://glocq.com/en/blog/20260827/
46•ibobev•5h ago•3 comments

Codex silently begs agents to make arbitrary web requests

https://spader.zone/wtf/
7•dboon•1h ago•0 comments

Show HN: LLM Attention Visualization

https://ishamf.dev/p/llm-attention-visualizer/
131•ifz•9h ago•22 comments

Mercury 2.5

https://www.inceptionlabs.ai/blog/introducing-mercury-2-5
124•Topfi•5h ago•16 comments

Implementation of GCC's Nested Functions (vs. C++ Lambdas)

https://uecker.codeberg.page/2026-09-05.html
58•uecker•3d ago•9 comments

Replacing a Rust Enum with a 64-Bit Word Made My Interpreter 17% Faster

https://pointersgonewild.com/2026-08-25-replacing-a-rust-enum-with-a-64-bit-word/
87•metrofun•3d ago•41 comments

An Accidental Blackboard

https://martinfowler.com/articles/exploring-gen-ai/an-accidental-blackboard.html
3•saikatsg•3d ago•0 comments

The Helicopter with Radioactive Blades

https://hackaday.com/2026/09/07/the-helicopter-with-radioactive-blades/
148•zdw•1d ago•46 comments

Tracing np.add, all the way down

https://blog.veitheller.de/numpy.html
38•luu•4d ago•2 comments

We built our house for LAN parties (2024)

https://lanparty.house/
420•fittingopposite•3d ago•308 comments

Show HN: Copperhead – Cursor for circuit boards

https://copperhead.sh/
208•animeshchouhan•12h ago•82 comments

Reverse Engineering an ASIC

https://kjartanvandriel.github.io/asic/
34•burekqueen•1d ago•4 comments

US to ban Canadian dairy, alcohol, motor vehicle imports on September 29

https://www.reuters.com/business/us-ban-canadian-dairy-alcohol-motor-vehicle-imports-september-29...
18•JumpCrisscross•50m ago•8 comments

The 92-Year-Old Mathematician and the Teenage Apprentice

https://www.nytimes.com/2026/09/06/science/92-year-old-mathematician-apprentice.html
143•robinhouston•2d ago•11 comments