frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Blizzard Revives 'StarCraft' Franchise with Open-World Sci-Fi Shooter

https://hypebeast.com/2026/9/blizzard-open-world-starcraft-sci-fi-shooter-2030-release-info-tease...
27•malloci•22m ago•23 comments

Claude is a Contrarian

https://medium.com/@rdsubhas/claude-is-a-contrarian-dbce4de5cada
21•rdsubhas•41m ago•10 comments

Distributed Systems Classics

https://nvartolomei.com/dist-sys-classics/
30•grep_it•53m ago•4 comments

Hacking AI customer service agents

https://www.intigriti.com/researchers/blog/hacking-tools/hacking-ai-customer-service-agents
19•snikolaev•29m ago•1 comments

Notes on gotchas while migrating 35kb preprompts from Opus to self-hosted Ollama

https://patrickmccanna.net/notes-on-migrating-large-prompts-away-from-anthropic-openai-to-self-ho...
69•0o_MrPatrick_o0•2h ago•29 comments

Foundation Model Engineering: From Theory to Production

https://sungeuns.github.io/foundation-model-engineering/
25•sungeuns•1h ago•2 comments

What a time to be alive

https://tenderlovemaking.com/2026/09/11/what-a-time-to-be-alive/
127•gregnavis•4h ago•166 comments

Principles for Fast Tokio Applications

https://dial9-rs.github.io/blog/principles-for-fast-tokio-applications/
29•carllerche•1h ago•8 comments

Show HN: Neobrutalism.dev – just added Base UI support and added new color theme

https://www.neobrutalism.dev/
11•samke-•53m ago•1 comments

Show HN: Fly.exe – An EON systems like virtual fruit fly uploaded to computer

https://github.com/Ibtisam-Mohammad/Fly.exe
6•Ibti_sam•59m ago•0 comments

Why don't machine learning research agents overfit?

https://www.amazon.science/blog/why-dont-machine-learning-research-agents-overfit
8•Betelbuddy•23m ago•1 comments

When LLM judges agree, should we believe them?

https://www.amazon.science/blog/when-llm-judges-agree-should-we-believe-them
6•Betelbuddy•26m ago•0 comments

Adversarial Fashion Makes a Statement on AI Panopticon

https://spectrum.ieee.org/adversarial-fashion
36•rbanffy•2h ago•16 comments

An atlas of periodic solutions to the three-body problem

https://www.threebodyorbits.com/
231•danielmorozoff•2d ago•51 comments

EuroBirdPortal – Live bird movements across Europe

https://www.eurobirdportal.org/ebp/en/
190•NKosmatos•8h ago•52 comments

A 386 PC for Your RP2350

https://github.com/rh1tech/frank-386
169•SamuraiLion•8h ago•48 comments

Fitting Neural Textures and PBR Material Maps with ES (No Backprop)

http://richg42.blogspot.com/2026/09/fitting-neural-texture-and-pbr-material.html
3•ibobev•21m ago•0 comments

Devil's Arrows: Ancient builders hauled 55k-lb stones 11 miles for UK stone row

https://www.sciencedaily.com/releases/2026/09/260909005152.htm
39•bookofjoe•3d ago•27 comments

XCancel service is suspended until further notice

https://xcancel.com/#
102•gaganyaan•7h ago•352 comments

The Tudor Kings

https://analog-antiquarian.net/2026/09/11/the-tudor-kings/
4•ibobev•54m ago•0 comments

For AI leaders Doom is a form of hype

https://erkansaka.net/2026/09/10/ai-doom-rhetoric-safety-hype/
97•luk4•40m ago•59 comments

Trying to Make a Loop Auto-Vectorize

https://jsgroth.dev/blog/posts/trying-to-make-a-loop-auto-vectorize/
21•zdw•4d ago•8 comments

I stress-tested Meta Muse until its agent control plane started timing out

https://blog.cygankiewicz.com/en/meta-muse-black-box-testing/
4•mpkc•29m ago•1 comments

Show HN: Pelican-bicycle alternatives (updated for 2026)

https://gally.net/temp/20260914pelican-alternatives/index.html
51•tkgally•3h ago•19 comments

How to write an effective software design document

https://refactoringenglish.com/excerpts/write-an-effective-design-doc/
227•fagnerbrack•3h ago•99 comments

Microsoft patches Windows and Excel – breaks audio, remote access, and paste

https://www.theregister.com/os-platforms/2026/09/14/microsoft-patches-windows-and-excel-breaks-au...
22•Alephinitesimal•45m ago•7 comments

China's Regulators Take Aim at "AI Boyfriends"

https://spectrum.ieee.org/china-ai-chatbot-regulation
33•andai•1h ago•10 comments

Apple's Siri AI Can Be Swapped Out for Claude, ChatGPT, Code Shows

https://www.macrumors.com/2026/09/14/siri-can-be-swapped-out-for-chatgpt-claude/
199•tosh•4h ago•113 comments

A Beginning for Mathematics

https://www.daniellitt.com/blog/2026/9/13/a-beginning-for-mathematics/
5•robinhouston•1h ago•0 comments

Truncated SVD

https://brashandplucky.com/2023/09/09/truncated-svd.html
4•ibobev•55m ago•0 comments