frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Oracle bans AI-generated code from OpenJDK

https://app.dealroom.co/news/feed/oracle-bans-ai-generated-code-from-openjdk-despite-ellison-s-cl...
45•delduca•28m ago•24 comments

An all-sky map of half a million supermassive black holes

https://www.sdss.org/black-hole-mapper-release-20/
67•MarcoDewey•2h ago•19 comments

DeepSeek V4 Flash 0731

https://arcprize.org/results/deepseek-v4-flash-0731
7•tosh•8m ago•2 comments

Responding to the next frontier of critical cyber capabilities

https://openai.com/index/responding-next-frontier-critical-cyber-capabilities/
66•artninja1988•1h ago•54 comments

New Mexico court orders Meta to pay $567m over harms to children’s mental health

https://www.theguardian.com/technology/2026/aug/06/new-mexico-court-meta
611•boplicity•17h ago•337 comments

Making Postgres 300x faster for analytics: batching, operator fusion, and SIMD

https://malisper.me/how-we-made-postgres-hundreds-of-times-faster-the-query-engine/
136•poly2it•7h ago•63 comments

Möbius-Strip Crosswords

https://quuxplusone.github.io/blog/2026/08/04/mobius-crossword/
20•ibobev•2h ago•1 comments

Show HN: Wyzer Programming Language

https://github.com/Wyzer-Lang/wyzer
130•v0id_isgood•5h ago•69 comments

AMD acquires Taalas to boost inference performance by etching models in silicon

https://www.theregister.com/systems/2026/08/06/amd-acquires-ai-chip-startup-taalas-to-boost-infer...
826•itvision•21h ago•625 comments

Adults over 65 will outnumber children by 2029

https://eco3min.fr/en/us-children-vs-adults-65-and-older/
51•brandonb•2h ago•42 comments

Kitesurf: Agent-first browser that runs in V8 isolates

https://blog.cloudflare.com/kitesurf/
88•m3h•7h ago•21 comments

Show HN: textlog – A quiet, text-only microblogging platform, open-source, no JS

https://textlog.cc/about
83•stagas•7h ago•34 comments

Petri Nets as a Music Sequencer

https://blog.stackdump.com/posts/petri-net-sequencer
37•m_kos•4d ago•12 comments

Why Are There Statues of Beavers on Top of This Oxford Street Shop?

https://londonist.com/london/history/oxford-street-beavers
27•bookofjoe•4d ago•7 comments

Taste Is All That's Left

https://notashelf.dev/posts/taste-is-all-thats-left
616•tsak•1d ago•487 comments

Canada adds 75,000 new jobs in July, unemployment rate lowest in 2 years

https://www.cbc.ca/news/business/canada-jobs-july-2026-9.7299225
28•vrganj•59m ago•4 comments

Building Community Out of Strangers

https://tracydurnell.com/2023/11/30/building-community-out-of-strangers/
10•surprisetalk•3d ago•0 comments

Tax cuts for the wealthy only benefit the rich (2023)

https://www.lse.ac.uk/research/research-for-the-world/economics/tax-cuts-for-the-wealthy-only-ben...
125•mooreds•1h ago•80 comments

São Paulo resident transforms degraded area into urban forest

https://saopaulosecreto.com/en/tiquatira-linear-park-en/
281•rmason•5d ago•108 comments

This Mine Predicts Major Wars. It's Opening Again

https://www.bloomberg.com/graphics/2026-opinion-australia-tungsten-mine-us-war-defense-china/
29•mooreds•1h ago•7 comments

TypeStax: A type scale generator with vintage audio hardware interface

https://www.typestax.com/
37•jasim•1w ago•9 comments

USA Today Co., partners with Palantir to analyze audience data

https://www.niemanlab.org/2026/08/americas-largest-newspaper-chain-usa-today-co-partners-with-pal...
154•cdrnsf•4h ago•61 comments

Scientists discover Kelvin-Helmholtz Instability on the surface of the Sun

https://nso.edu/press-release/nsf-inouye-solar-telescope-enables-major-discovery-of-a-hidden-sola...
294•neversaydie•2d ago•58 comments

Bioengineered chewing gum may offer a way to fight HPV and other microbes

https://www.sciencedaily.com/releases/2026/08/260803080917.htm
189•Audiophilip•20h ago•55 comments

99% of My Website Traffic Is Bots

https://patronview.com/news/99-percent-of-my-website-traffic-is-bots/
257•petercooper•3h ago•255 comments

GitHub Actions and Pages are experiencing degraded availability

https://www.githubstatus.com/incidents/qcvjkzcs7j74
474•Footkerchief•1d ago•396 comments

A quine in Piet – a GIF image that prints itself [video]

https://www.youtube.com/watch?v=GwMtzhjCzyc
65•surprisetalk•4d ago•8 comments

Improving GPT‑5.6 Sol in ChatGPT, expanding GPT‑5.6 Luna access for free users

https://openai.com/index/improving-gpt-5-6-sol-in-chatgpt/
298•tedsanders•1d ago•238 comments

Iceberg Collapses and Flips over in Ilulissat, Greenland (July 25, 2026) [video]

https://www.youtube.com/watch?v=UufMqwyO7pY
157•Bender•3h ago•40 comments

The BBC Tetris Companion

https://www.leadedsolder.com/2026/07/28/bbc-bridge-companion-part-1-overview.html
65•zdw•1w ago•9 comments