frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•10mo ago

Comments

steele•10mo ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•10mo ago
Lmao, gentrify cracked me up
neilv•10mo ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•10mo ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•10mo ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•10mo ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•10mo ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•10mo ago
May as well just release an executable tbh.
theamk•10mo ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•10mo ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•10mo ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

We haven't seen the worst of what gambling and prediction markets will do

https://www.derekthompson.org/p/we-havent-seen-the-worst-of-what
260•mmcclure•1h ago•155 comments

CERN to host Europe's flagship open access publishing platform

https://home.cern/news/news/cern/cern-host-europes-flagship-open-access-publishing-platform
108•JohnHammersley•1h ago•8 comments

Why so many control rooms were seafoam green (2025)

https://bethmathews.substack.com/p/why-so-many-control-rooms-were-seafoam
352•Amorymeltzer•1d ago•63 comments

John Bradley, author of xv, has passed away

https://voxday.net/2026/03/25/rip-john-bradley/
119•linsomniac•2h ago•42 comments

My minute-by-minute response to the LiteLLM malware attack

https://futuresearch.ai/blog/litellm-attack-transcript/
218•Fibonar•5h ago•101 comments

Doom entirely from DNS records

https://github.com/resumex/doom-over-dns
131•Venn1•3d ago•35 comments

How much precision can you squeeze out of a table?

https://www.johndcook.com/blog/2026/03/26/table-precision/
22•nomemory•1h ago•2 comments

Fermented foods shaped human biology

https://press.asimov.com/articles/culture-shift
72•mailyk•6d ago•34 comments

Show HN: Turbolite – a SQLite VFS serving sub-250ms cold JOIN queries from S3

https://github.com/russellromney/turbolite
59•russellthehippo•2h ago•16 comments

Colibri – chat platform built on the AT Protocol for communities big and small

https://colibri.social/
86•todotask2•3h ago•39 comments

OpenTelemetry profiles enters public alpha

https://opentelemetry.io/blog/2026/profiles-alpha/
117•tanelpoder•4h ago•13 comments

Moving from GitHub to Codeberg, for lazy people

https://unterwaditzer.net/2025/codeberg.html
451•jslakro•7h ago•231 comments

HyperAgents: Self-referential self-improving agents

https://github.com/facebookresearch/hyperagents
76•andyg_blog•2d ago•28 comments

Deploytarot.com – tarot card reading for deployments

https://deploytarot.com/setup
5•rembish•19m ago•2 comments

Personal Encyclopedias

https://whoami.wiki/blog/personal-encyclopedias
763•jrmyphlmn•1d ago•158 comments

New York City hospitals drop Palantir as controversial AI firm expands in UK

https://www.theguardian.com/technology/2026/mar/26/new-york-hospitals-palantir-ai
28•chrisjj•37m ago•7 comments

Stripe Projects: Provision and manage services from the CLI

https://projects.dev/
78•piinbinary•5h ago•19 comments

Building a Blog with Elixir and Phoenix

https://jola.dev/posts/building-a-blog-with-elixir-and-phoenix
56•shintoist•3h ago•3 comments

Fast regex search: indexing text for agent tools

https://cursor.com/blog/fast-regex-search
7•jxmorris12•2d ago•1 comments

From zero to a RAG system: successes and failures

https://en.andros.dev/blog/aa31d744/from-zero-to-a-rag-system-successes-and-failures/
251•andros•2d ago•78 comments

Running Tesla Model 3's computer on my desk using parts from crashed cars

https://bugs.xdavidhu.me/tesla/2026/03/23/running-tesla-model-3s-computer-on-my-desk-using-parts-...
828•driesdep•1d ago•291 comments

My home network observes bedtime with OpenBSD and pf

https://ratfactor.com/openbsd/pf-gateway-bedtime
89•ibobev•3d ago•27 comments

Taming LLMs: Using Executable Oracles to Prevent Bad Code

https://john.regehr.org/writing/zero_dof_programming.html
20•mad44•3h ago•5 comments

End of "Chat Control": EU parliament stops mass surveillance

https://www.patrick-breyer.de/en/end-of-chat-control-eu-parliament-stops-mass-surveillance-in-vot...
488•amarcheschi•8h ago•253 comments

The Oxford Comma – Why and Why Not

https://www.deborahcourtbooks.com/post/the-oxford-comma-why-and-why-not
24•taubek•3h ago•31 comments

Interoperability Can Save the Open Web (2023)

https://spectrum.ieee.org/doctorow-interoperability
156•janandonly•6h ago•47 comments

Light on Glass: Why do you start making a game engine?

https://analogdreamdev.substack.com/p/light-on-glass
41•atan2•3d ago•22 comments

Olympic Committee bars transgender athletes from women’s events

https://www.nytimes.com/2026/03/26/world/olympics/ioc-transgender-athletes-ban.html
158•RestlessMind•6h ago•353 comments

Obsolete Sounds

https://citiesandmemory.com/obsolete-sounds/
202•benbreen•17h ago•37 comments

Shell Tricks That Make Life Easier (and Save Your Sanity)

https://blog.hofstede.it/shell-tricks-that-actually-make-life-easier-and-save-your-sanity/
470•zdw•20h ago•222 comments