frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Apple introduces M6 and M5 Ultra for a big leap in performance and AI compute

https://www.apple.com/newsroom/2026/08/apple-introduces-m6-and-m5-ultra-for-a-big-leap-in-perform...
480•interpol_p•3h ago•394 comments

New Mac Studio with M5 Max and M5 Ultra

https://www.apple.com/newsroom/2026/08/apple-introduces-new-mac-studio-with-m5-max-and-m5-ultra/
445•interpol_p•3h ago•287 comments

Bomb Fishing Is Wreaking Havoc on Indonesia's Coral Reefs

https://e360.yale.edu/digest/bomb-fishing-coral-reefs
99•speckx•2h ago•71 comments

Qwen 3.8-Flash-Next releasing tomorrow (125B a6B)

https://modelscope.cn/models/Qwen/Qwen3.8-Flash-Next
196•garo-pro•4h ago•83 comments

New Mac mini, featuring M6 and M5 Pro

https://www.apple.com/newsroom/2026/08/apple-unveils-a-more-powerful-mac-mini-featuring-the-all-n...
212•runako•3h ago•120 comments

Don't Wordle

https://dontwordle.com/
196•Hbruz0•4h ago•81 comments

How much of HN is AI?

https://blog.coredump.cx/p/how-much-of-hn-is-ai
146•surprisetalk•1h ago•105 comments

HelloAssembly The smallest possible complete Windows application

https://github.com/PlummersSoftwareLLC/HelloAssembly
62•Bluestein•4h ago•34 comments

Beyond Good and Evil: Nietzsche and the Great War

https://www.historytoday.com/archive/feature/beyond-good-and-evil-nietzsche-and-great-war
13•samizdis•1h ago•8 comments

AI is hitting entry-level jobs hardest, Stanford study finds

https://arstechnica.com/ai/2026/08/ai-is-hitting-entry-level-jobs-hardest-stanford-study-finds/
55•Brajeshwar•1h ago•32 comments

MySQL CDC to BigQuery: what periodic syncs miss, and how binlog avoids it

https://www.erathos.com/en/blog/mysql-cdc-to-bigquery
18•gpaulbagetti•2h ago•6 comments

iCloud+ Hide My Email addresses will remain on icloud.com

https://developer.apple.com/news/?id=1ptvdtcm
570•K7PJP•18h ago•179 comments

Anthropic Sees over $30T in Potential Revenue

https://www.wsj.com/tech/ai/anthropic-expected-to-tell-investors-it-sees-over-30-trillion-in-pote...
13•cwwc•17m ago•16 comments

Visualizing Binary Files

https://movq.de/blog/postings/2026-08-05/0/POSTING-en.html
13•zdw•22h ago•2 comments

MS Paint and Photos inivisibly watermark even locally generated output with GUID

https://xusheng.dev/posts/reversing/mspaint_invisible_watermark/main/
813•ComputerGuru•1d ago•407 comments

Xiaomi: New CPU matches Apple cores single threaded, much faster multithreaded

https://twitter.com/lemire/status/2091894299289874926
950•tosh•1d ago•688 comments

Windows 95 released August 24, 1995

https://dfarq.homeip.net/happy-20th-birthday-to-windows-95/
63•giuliomagnifico•9h ago•23 comments

Building a backyard office, the build and cost breakdown

https://www.imkylelambert.com/articles/building-a-backyard-office-the-build-and-cost-breakdown
90•surprisetalk•2h ago•51 comments

How Universities Should Prepare Founders

https://paulgraham.com/prepare.html
214•gmays•14h ago•253 comments

SiFive's First Server Platform

https://chipsandcheese.com/p/sifives-first-server-platform
109•geerlingguy•13h ago•36 comments

What's new in Emacs 31.1

https://www.masteringemacs.org/article/whats-new-in-emacs-311
300•geospeck•1d ago•71 comments

How Europe is killing makers and micro-entrepreneurs

https://lectronz.com/u/lectronz/articles/how-europe-is-killing-makers-and-micro-entrepreneurs
1554•l-one-lone•1d ago•968 comments

The entire city of San Francisco as a video game

https://sf.thijs.gg/
561•centrosphere•23h ago•163 comments

Moon (2024)

https://ciechanow.ski/moon/
243•simonebrunozzi•18h ago•38 comments

Solving the 1+N Query Problem

https://acadia.engineering/blog/solving-the-1-plus-N-query-problem
8•wheatBread•4h ago•0 comments

Bookshelf – Self-hosted eBook library that runs on object storage

https://github.com/murerkinn/bookshelf
154•arbayi•17h ago•56 comments

Where did all the public bathrooms go?

https://daily.jstor.org/where-did-all-the-public-bathrooms-go/
316•herbertl•23h ago•718 comments

Training AI to Paint with Code

https://surya.website/rling-qwen-to-paint-with-code
171•Tiberium•1d ago•19 comments

Peppermint oil reduces blood pressure by 8.48 mmHg in small study

https://journals.plos.org/plosone/article?id=10.1371/journal.pone.0344538
213•brandonb•1d ago•101 comments

Autostep (YC P26) Is Hiring AI/Fullstack Engineers and a Chief of Staff

https://app.dover.com/Autostep/careers/e9510e3b-a854-4e48-9e5d-c89796acaed4
1•adawg4•22h ago