frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

SpaceX catches the Starship to end Flight 15

https://www.spacex.com/launches/starship-flight-15
1297•ls612•14h ago•872 comments

Why did some Apollo missions carry a grenade launcher?

https://space.stackexchange.com/questions/37775
65•Skyfall106•3h ago•30 comments

Lovable apps expose passport details and more than 200K private messages

https://www.crissyfield.de/research/lovable-en/
854•armcat•18h ago•330 comments

Court denies motion to dismiss DRAM price fixing case

https://litnews.ai/articles/garciaguirre-samsung-sk-hynix-micron-dram-conspiracy-suit-survives-di...
221•ybathaee•10h ago•77 comments

Strictly monotonic timestamps and gapless sequences in Rust

https://tsoracle.rs/
13•znano•2d ago•1 comments

Handwritten 200-year-old dismissal notice found on roof tile

https://www.bbc.co.uk/news/articles/c6jdmdzv25r9o
29•nephihaha•2d ago•16 comments

Disk encryption on NetBSD – achieving secrecy

https://netbsd.org/~nia/disk-encrypt/
48•jaypatelani•6h ago•6 comments

How did Woz write the Apple 1 BASIC before building the computer?

https://retrocomputing.stackexchange.com/questions/17957
234•Skyfall106•13h ago•117 comments

My favourite modern NES games

https://jordi.inversethought.com/blog/25-of-my-favourite-modern-nes-games/
108•jordigh•9h ago•11 comments

Show HN: Carton Clock – A working pendulum clock made from empty drink cartons

https://www.niklasroy.com/carton-clock/
6•r0r0•2d ago•0 comments

Semicircle Packing

https://rorz.io/writing/semicircle-packing
39•sarreph•1d ago•4 comments

The Evolving Story of How Chemistry Became Biology

https://www.quantamagazine.org/the-evolving-story-of-how-chemistry-became-biology-20261112/
60•pseudolus•2d ago•14 comments

KDE: The documentary [video]

https://tube.kockatoo.org/w/fFinNHfanLT7aBEb2B8y4c
500•mrkn1•22h ago•111 comments

A family tree of software job titles

https://zwischenzugs.com/2026/11/03/a-family-tree-of-software-job-titles/
342•umerf•18h ago•170 comments

Book list for streetfighting computer scientists

https://nick-black.com/dankwiki/index.php?title=Book_list_for_streetfighting_computer_scientists
26•num42•5h ago•4 comments

Why get an expensive Pi when I have an old phone?

https://so.long.thanks.fish/why-pi-when-i-have-an-old-phone/
567•casi•4d ago•307 comments

500 Lines or Less A 3D Modeller

https://aosabook.org/en/500L/a-3d-modeller.html
70•myth_drannon•1d ago•11 comments

PyPI's redesigned project pages with clearer security signals are now live

https://blog.pypi.org/posts/2026-11-06-ui-updates-complete/
251•rbanffy•20h ago•106 comments

Show HN: Gawain – Require type hints on all Python variables

https://github.com/matheuzgomes/gawain
57•MarinhoD•7h ago•35 comments

Kiri – The Modern Container Runtime

https://runkiri.com/
59•nikolay•7h ago•30 comments

Open-Source HF Communications for Remote Communities and Experimenters

https://www.ardc.net/rhizomaticas-hermes-and-mercury-expand-open-source-hf-communications-for-rem...
22•tejtm•4d ago•2 comments

We're Asking an Appeals Court to Require a Warrant for ALPR Searches

https://www.eff.org/deeplinks/2026/11/were-asking-appeals-court-require-warrant-alpr-searches
250•nobody9999•10h ago•68 comments

Show HN: DeepSeek V3 in ~200 lines of pure Jax

https://github.com/Vaibhaav-Tiwari/deepseek-v3-jax
241•VaibhaavTiwari•21h ago•23 comments

Project Zero will disclose vulnerabilities 90 days after reporting

https://projectzero.google/2026/11/disclosure-policy.html
265•hacb•1d ago•142 comments

Show HN: Turbo-Browser-MCP – Batch forms, DOM deltas and submit guards for MCP

https://github.com/Tthanh2k6/turbo-browser-mcp
38•tthanh2k6•8h ago•8 comments

Generative AI uses more energy on non-English text

https://news.umich.edu/generative-ai-uses-more-energy-on-non-english-text/
215•DeepLogin•4d ago•112 comments

Advancing science and engineering with Antigravity's /teamwork

https://research.google/blog/advancing-science-engineering-with-antigravitys-teamwork-feature/
204•acossta•22h ago•48 comments

One Man's Quest to Create the Perfect Whiskey Glass

https://www.nytimes.com/2026/11/13/dining/drinks/kurt-josef-zalto-whiskey-glass.html
41•Kaibeezy•1d ago•39 comments

Oxford Molecular Motors

https://www.physics.ox.ac.uk/research/group/oxford-molecular-motors/research/bacterial-flagellar-...
58•handfuloflight•3d ago•14 comments

A rare glimpse inside the high-risk, high-reward Hormuz trade

https://www.lloydslist.com/LL1158922/A-rare-glimpse-inside-the-highrisk-highreward-Hormuz-trade
81•everybodyknows•4d ago•75 comments