Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.
@slothropRocketman oh, shoot, that image was added by it being posted in the blog plugin, let me do that, thanks!
これはほんとに4年保たないかもなあアメリカ…🥺
mjsk
I boosted several posts about this already, but since people keep asking if I've seen it....
MITRE has announced that its funding for the Common Vulnerabilities and Exposures (CVE) program and related programs, including the Common Weakness Enumeration Program, will expire on April 16. The CVE database is critical for anyone doing vulnerability management or security research, and for a whole lot of other uses. There isn't really anyone else left who does this, and it's typically been work that is paid for and supported by the US government, which is a major consumer of this information, btw.
I reached out to MITRE, and they confirmed it is for real. Here is the contract, which is through the Department of Homeland Security, and has been renewed annually on the 16th or 17th of April.
https://www.usaspending.gov/award/CONT_AWD_70RCSJ23FR0000015_7001_70RSAT20D00000001_7001
MITRE's CVE database is likely going offline tomorrow. They have told me that for now, historical CVE records will be available at GitHub, https://github.com/CVEProject
Yosry Barsoum, vice president and director at MITRE's Center for Securing the Homeland, said:
“On Wednesday, April 16, 2025, funding for MITRE to develop, operate, and modernize the Common Vulnerabilities and Exposures (CVE®) Program and related programs, such as the Common Weakness Enumeration (CWE™) Program, will expire. The government continues to make considerable efforts to support MITRE’s role in the program and MITRE remains committed to CVE as a global resource.”
아직도 게임회사 주주총회에서 '페미 손가락 논란 직원 어떻게 처리했냐'는 질문이 나오네...
출처: https://youtu.be/DhCnKDZLzII?si=0ptkwnHiJmiXQwCG&t=203, 데크빌, 2025.4.4.
Fedora Linux 42 is released, and we have a ton of updates to share with you!
Announcement: https://fedoramagazine.org/announcing-fedora-linux-42/
NEW Fedora KDE Desktop Edition: https://fedoramagazine.org/whats-new-for-fedora-kde-plasma-desktop-42/
Fedora Workstation 42: https://fedoramagazine.org/whats-new-fedora-workstation-42/
Fedora Asahi Remix 42: https://fedoramagazine.org/fedora-asahi-remix-42-is-now-available/
Fedora Atomic Desktops in F42: https://fedoramagazine.org/whats-new-for-fedora-atomic-desktops-in-fedora-42/
Happy upgrading!
Oh nice, the upcoming version of the Android Mastodon app will show you the post you're replying to!
https://github.com/mastodon/mastodon-android/commit/f79cb286005d6c99da72d67399b0c9f947e5d276
Can't wait to see what that looks like.
via https://stefanbohacek.online/@mastodon_mobile_apps/114343830671546607
Offline Care & Repair Day
This Thursday 17th 17:00-21:00
Come by and help clean 
@offline Sign Up Here:
https://pads.offline.place/p/care_and_repair
#infosec people, THIS is big and you need it in front of management RIGHT NOW.
MITRE has informed the CVE board members that effective TONIGHT, funding to run CVE and CWE is effectively gone. The US federal government contracts MITRE to run these programs including both management, operations, and infrastructure.
This not only could but almost certainly will result in disruptions to CVE and CWE including a halt of all operations if new contracts/funding are not secured.
The scale of the numbers involved in the OpenAI fiasco is just staggering to me. I cannot comprehend burning $50 billion dollars every single year without a single thing to show for it.
https://www.wheresyoured.at/openai-is-a-systemic-risk-to-the-tech-industry-2/
朝、明るくなるのが早くなったなぁと思う。急に早くなったわけでもない、不思議。
thinking about "ai can only do 80% of the job correctly" and "worse is better" simultaneously... i've always been more of the MIT type, but have always had those new jersey fans talk about how wrong I am...
Working on a big #pixelfed app update with a few improvements and a new feature or two!
If you're defending your local community from surveillance and censorship, consider joining the Electronic Frontier Alliance. https://efa.eff.org/pages/about
So... what would it take to recreate a community-driven CVE database?
And how do we backup the existing thing ASAP, before Mitre pulls the plug?
Come on, people, let's get going.
(PS: Yes, I know I am late to the party)
If you're defending your local community from surveillance and censorship, consider joining the Electronic Frontier Alliance. https://efa.eff.org/pages/about
ruby-jp SlackでRubyistのみなさんが物理で集結しつつあるのを観測しています。いいなあいいなあ♪
There are many social networking contenders, but only a few will romaine. Likely this is just the tip of her digital iceberg; certainly a new leaf for her, but it might turn out to be a little gem. Lettuce see what happens. https://www.theguardian.com/politics/2025/apr/15/liz-truss-to-launch-uncensored-social-network-to-counter-mainstream-media
People who hate systemd mostly have no fucking clue about systemd. Here's a little nugget of information people don't know, and that everyone who does know but has an agenda tends to hide.
Are you ready for it?
Here it goes.
systemd is entirely modular.
The answer is 42! Fedora Linux 42, that is https://lobste.rs/s/izbyyg #release
https://fedoramagazine.org/announcing-fedora-linux-42/
unit testing the derive macro let's go
美術の展示などで、倫理的な(？)問い直しが展示の外から行われたときに、どう対応するのか。杉田敦さんがひたすら逡巡しつづける記事なんだけど、なんかすごくわかるというか...。 自分をある意味部外者として位置付けてそのように振る舞っていれば、自己の責任は問われることはないのだけど、自分が意識していない不誠実というものは無数にあって、自分が当事者でない場所なんてない。 https://www.art-it.asia/top/contributertop/admin_ed_columns/265067/
유튜브 댓글 보면서 느끼는 건데... 한국에서 애플 들어온 이유를 아주 잘 알겠다...
I boosted several posts about this already, but since people keep asking if I've seen it....
MITRE has announced that its funding for the Common Vulnerabilities and Exposures (CVE) program and related programs, including the Common Weakness Enumeration Program, will expire on April 16. The CVE database is critical for anyone doing vulnerability management or security research, and for a whole lot of other uses. There isn't really anyone else left who does this, and it's typically been work that is paid for and supported by the US government, which is a major consumer of this information, btw.
I reached out to MITRE, and they confirmed it is for real. Here is the contract, which is through the Department of Homeland Security, and has been renewed annually on the 16th or 17th of April.
https://www.usaspending.gov/award/CONT_AWD_70RCSJ23FR0000015_7001_70RSAT20D00000001_7001
MITRE's CVE database is likely going offline tomorrow. They have told me that for now, historical CVE records will be available at GitHub, https://github.com/CVEProject
Yosry Barsoum, vice president and director at MITRE's Center for Securing the Homeland, said:
“On Wednesday, April 16, 2025, funding for MITRE to develop, operate, and modernize the Common Vulnerabilities and Exposures (CVE®) Program and related programs, such as the Common Weakness Enumeration (CWE™) Program, will expire. The government continues to make considerable efforts to support MITRE’s role in the program and MITRE remains committed to CVE as a global resource.”
It's easier than ever to de-censor videos
Link: https://www.jeffgeerling.com/blog/2025/its-easier-ever-de-censor-videos
Discussion: https://news.ycombinator.com/item?id=43695701
I have really good news to announce to everyone. Because of our reporting and many readers contacting Planned Parenthood of Arizona, the organization will NOT over comply with Trump, and is restarting its trans adult care. Good work everyone.
#OtD 15 Apr 1946 mine workers in Takahagi, Japan, won the right to sell coal directly after taking over their mines. Instead of striking, Japanese workers started takeovers after which they'd negotiate with management on their demands, and usually win https://stories.workingclasshistory.com/article/8637/takahagi-miners-win-payment
나랑 놀던 친구들 안친하거나 싫어했지만 그래도 나와 같은 배경을 가지고 살아온 사람들 이런사람들이 계속 죽어나간다. 이 중에서 자연사는 없다. 나는 더 이상 이런 것들을 보기가 싫다
성소수자를 위한 법이 생긴다고 님들의 권리가 줄어드는거 아니에요. 그런 생각은 터프랑 트민들이나 하는겁니다.
Sharing some professional news: I've joined Mastodon full-time as Head of Communications! After freelancing with the project since 2023, I'm excited to bring my experience in open source and community to help tell the story of the Fediverse. Read more on my blog.
having an "enhance with AI" button in the word processor i use to write smut on my phone is scary. i'm perpetually worried that i'm gonna click it by accident one day
@lynnesbianLynnesbian 
"convert your badly written smut to generically written puritan non-smut"
playing a 3D game on a phone uses more processing power to render the bit behind the camera cutout than the NES used to draw the entire game
@lynnesbianLynnesbian in other words: bring back whole screens! if the phone renders that stuff then it’s our god given right to enjoy every last pixel and not have any of it cut off by stupid screens!
In today's mastodon.social update, we're testing a few minor quality of life improvements to the web interface: Every list of accounts now has a shortcut to add or remove an account from lists; clicking a hashtag in a post now brings up a menu with a shortcut to browse posts in that hashtag specifically by the author, and a new featured tab on profiles to make featured hashtags and posts easier to find and navigate.
I see a lot of problems that people use AI for that SMT solvers have been solving for a long time, which are basically AI that you can explain.
Congratulations to Jason Cong, the holder of the Volgenau Chair for Engineering Excellence at the UCLA Henry Samueli School of Engineering and Applied Science , on receiving the 2024 ACM Charles P. “Chuck” Thacker Breakthrough in Computing Award!
Cong is recognized for fundamental contributions to the design and automation of field-programmable systems and customizable computing.
Learn more: https://awards.acm.org/about/2024-thacker
久しぶりに、fedibird.comの招待コード出しておきますね。
fedibird.comは招待制になっており、通常の登録フォームからは登録できません。
このいずれかのリンクを辿って登録してください。
https://fedibird.com/invite/dbJvjMZt
https://fedibird.com/invite/cfSVzLDe
https://fedibird.com/invite/puHdbPZA
https://fedibird.com/invite/aMoksX2y
リンクからアクセスして登録する画面にならない場合は、その招待リンクは無効になっています。他のリンクをお試しください。
In today's mastodon.social update, we're testing a few minor quality of life improvements to the web interface: Every list of accounts now has a shortcut to add or remove an account from lists; clicking a hashtag in a post now brings up a menu with a shortcut to browse posts in that hashtag specifically by the author, and a new featured tab on profiles to make featured hashtags and posts easier to find and navigate.
fedibirdは今、環境整備のフェーズで、サーバ構成とか開発環境とかあれこれやってます。目立った進捗が見られない時期ですが、大事なところなので、少しお時間頂きますよー
Sending a big thank you to Arm for providing ARM GitHub Action runners to CPython ahead of the public preview launch today! https://github.blog/changelog/2025-04-14-windows-arm64-hosted-runners-now-available-in-public-preview/ #python #cpython
https://github.blog/changelog/2025-04-14-windows-arm64-hosted-runners-now-available-in-public-preview/
Regardless of what happens with CVE/NVD, the PSF will continue publishing advisories for CPython through our OSV database and to the security-announce@python.org mailing list.
Please subscribe to those data sources to guarantee delivery of vulnerability data about CPython.
Offline Care & Repair Day
This Thursday 17th 17:00-21:00
Come by and help clean @offline Sign Up Here:
https://pads.offline.place/p/care_and_repair
I have really good news to announce to everyone. Because of our reporting and many readers contacting Planned Parenthood of Arizona, the organization will NOT over comply with Trump, and is restarting its trans adult care. Good work everyone.
みんな朝はやいねえ
wakest ⁂
Emelia 👸🏻
サトマキ
@LoginBonus@misskey.m544.net
Connected Places
@reiver ⊼ (Charles) 
Dr. Anna Latour
Hugo van Kemenade
