What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

All sizes in inches, price ($US) doesn't include shipping:

Watercolor painting:
3x3 inch (no matting): $25
6x6 inch (no matting): $50
10x10 inch (no matting): $75
10x10 inch with matting: $100

Acrylic painting:
6x6 inch on canvas: $60
8x8 inch on canvas: $80 g
10x10 inch on canvas: $100
12x12 inch on canvas: $120

16x20 on wood: $500

Payment: 50% down at start
remaining 50% plus shipping when piece is finished and approved by you

Payments/orders handled here:
ko-fi.com/pussreboots4573

0
0

It's shamelessness, lack of decency, lack of self-awareness, a broken psyche desperately hungry for ego reinforcement, will to power ... those are advantages in our system, adaptive qualities. That's what distinguishes the people in that chat, the people running things. They don't need to be smart.

0

📑 New on my postroll:

Pixelfed leaks private posts from other Fediverse instances - fiona fokus

There are right ways for a developer to respond to a responsible vulnerability disclosure.

This is not one of those ways, and demonstrates (once again) that the developer behind one of the most popular ActivityPub implementations is maybe not a great steward of the thing(s) he creates.

https://fokus.cool/2025/03/25/pixelfed-vulnerability.html

0
0
0

hot take: dealing with vuln disclosures can be really scary and carry a lot of shame and/or embarrassment, but if you can't handle that or if you're so immature that you don't even mention the issue in your release notes, you probably shouldn't be leading the development of multiple federated social network platforms

0

Now available: ORCID's 2024 Annual Report!
Highlights include:
✅ Helping address the research integrity crisis through new Record Summaries and Trust Markers;
⚙️ Improving data quality through automation and smart recommendations;
🌏 Expanding global participation we welcomed new consortia in Lebanon and Nigeria in 2024!

Explore the full report to see what we've accomplished together—and don't forget to register for our April 1 Community Town Hall to learn what's next: info.orcid.org/now-available-o

Graphic showing three highlights from ORCID's 2024 Annual Report
0
0
0
0

One of our highlights of 2024 was our work with the GNOME Foundation to make GNOME OS a viable daily driver for QA.

The project included migrating GNOME OS to systemd's new update system — sysupdate — which offers improved benefits such as immutability, auto-updating, and modernised security properties.

You can read the first blog post covering the project here: codethink.co.uk/articles/2024/

0
0
0
0
0

Questrial, designed by Joe Prince and Laura Meseguer

During colonial times, European colonial powers in Africa made their languages the official ones. Many African languages still lack typographic support, making it hard to write them correctly due to missing letters and diacritics in most fonts.
In post-colonial times and to address the lack of open source fonts for African languages, @googlefonts gave me the task of expanding Questrial for that purpose

More here:
fonts.google.com/specimen/Ques

0
0
0
0
0
0
0
0
0

@activitypub
Bug report? ActivityPub wrinkles

Hey, thanks for the awesome ActivityPub support!

It has been working great so far on our forum at fbrc.nodebb.com, with two exceptions. I don't know if these are bugs or if they fall in NodeBB scope or not, figured I'd report them here:

1. Alt text not transferring to Mastodon. This post has alt text in NodeBB (I think), it's not showing up when viewed via Mastodon web UI: fbrc.nodebb.com/topic/5/micro-

0

I’m curious about the possibility of using a NodeBB account as my main account for accessing and interacting with the fediverse.

One strength with forums I see is that they are more community- and interest oriented. They often have a clearer purpose.

My engagements with the world are different. I have many interests and different engagements. My “World” category reflects that.

I don’t want to move things from World into the forum that hosts my account if that conversation doesn’t fit the focus of the forum.

But I do want to structure my world more, if I want to use my NodeBB account as my main handle on the fediverse.

I can’t organize World right now.

Could I make a group on the forum with only me as member and then populate threads in different categories? I guess so. It would be a lot of categorizing.

More ideal would be if I could subscribe to categories on other NodeBB forums and then those categories would show even on my own instance - but just for me! Other folks on my instance haven’t asked for that.

Say I’m interested in the @activitypub@community.nodebb.org category and would like to follow all new topics. I can subscribe to that category and get it into my world. A better solution would be that the category is there in my personal interface on my instance to organize the topics for me. Just like they do on the original instance where the category lives.

I’m writing this topic from the “Uncategorized” category of our own NodeBB forum. It’s an example of me not knowing how I can start conversations on other NodeBB forums without having to create a new account on that forum (which then defeats the federation feature) or create that topic from an unrelated category on our own forum, which would then become spam.

0

Pretty much what @PitaJ said, yes. Just update your DNS records so the new domain points to your NodeBB's IP (or reverse proxy), and update config.json with the new domain.

Everything uses relative links, and url in config.json is only ever used in situations where we don't have any context as to what URL to use, such as email digests.

0

Thank you to everyone who ordered a shirt! The preorder window is now closed. Our team is hard at work bringing them to life. We expect to start shipping by mid April. You will receive a confirmation email as soon as your order is on its way. We appreciate your patience and support!

0

Why I Write

I write because I’m , and every trans voice matters. I doubt that I have novel things to say; I nod to the socialists, I repeat my trans siblings, I retread the ground feminists have walked, I find markers left by people of color, and I know I’m not alone. I do not seek to break new ground. I seek to hold ground, ground that was taken from us. To hold space and memory. To leave behind a record of who I was, of what I knew, of why I fought, of how I loved, and of the lies I was told, so that those who come after me will know they are not alone.

I won’t bore you by making the point that not all voices matter, that cis voices who babble
platitudes offer nothing to liberation and allies who push us aside to speak for us do so without regard for the cliffs they shove us over. I’ll trust you learned from Black voices. I know I’m still trying to learn from them.

But fascists know trans voices matter. The patriarchy knows; capitalists and racists know. They know what a threat self-actualization is.

It’s how I’ve come to understand the importance of valuing any trans voice that speaks, and why it’s important to add my voice. Our stories are brilliant spotlights shined into the darkness of the lies used to keep our siblings from knowing themselves. Each time we speak, it is a spell of curse-breaking. Our lives are resistance. Our stories are beacons lit by crystallized memories of our lives.

I write because let’s face it, even better than ruining a transphobe’s day with my joy is ruining many of their days with records of my joy.

And I write so that when I’m dead, trans people will know what I had to do to be myself. I cannot tell them how to be themselves. But perhaps I can show them what I did, and why.

0
0
0

Today is the 30th anniversary of the launch of the first wiki by Ward Cunningham. A page that anyone could edit. Right from the browser. It was generally seen as a bad idea. What if people did bad things?

Originally to support the software development community in creating a repository of software design patterns, wikis were later used for many other goals (even an encyclopedia!), and became part of Web 2.0, together with blogs, fora and social media.

Thank you, Ward!

wikiindex.org/w/30th_WikiBirth

0
0
0
0
0
0
0
0
0
0
0

コードも更新 :saba:

94d71c992e (upstream/main) Refactor alerts to TypeScript, remove `react-notification` dependency (#34239)
e1dbbf6c9d Isolate assertions in v2/notifications intermittent failure cases (#34271)
3edac14f02 Fix follower synchronization mechanism erroneously removing followers from multi-page collections (#34272)
81b88095b4 Allow devcontainer to be accessed from local network (#34269)
2eb6d815d6 Fix bookmarks and favourites not being filtered (#34260)
8c3eeb4d29 Fix filters not applying in detailed view (#34259)
38f5e74122 Add `Deprecation` headers on deprecated endpoints (#34262)
40bb8ec325 chore(deps): update dependency selenium-webdriver to v4.30.1 (#34250)
ef8f62c382 chore(deps): update dependency mime-types to v3.6.2 (#34266)
9bba2aab33 Convert `intents` spec controller->request (#34261)
2453b94198 chore(deps): update dependency nokogiri to v1.18.6 (#34267)
90bf67f053 New Crowdin Translations (automated) (#34265)
2fc4475ea3 fix(deps): update babel monorepo to v7.27.0 (#34263)

0
0

pixelfed instance admins: Please update pixelfed to v0.12.5 asap. The version contains fixes for serious security vulnerabilities that I reported.
I will disclose further details about the vulnerabilities in about 24 hours.
:boost_requested:

Pixelfed before v0.12.5 has a vulnerability where it could leak your private posts, regardless of whether you are a Pixelfed user or not.
Admins should update ASAP.

When following someone from a different server on the Fediverse, the remote server decides whether you are allowed to do that. This enables features like locked accounts. Due to an implementation mistake, Pixelfed ignores this and allows anyone to follow even private accounts on other servers. If a legitimate user from a Pixelfed instance follows you on your locked account, anyone on that Pixelfed instance can read your private posts.

I wrote a blog post about how I found the vulnerability, how disclosure coordination went and general ramblings about Fediverse safety:
fokus.cool/2025/03/25/pixelfed

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0