What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

0
0
0
politietiagderlogg @politietiagderlogg@activitypub.stigatle.no
Public

17:57: Politiet rykket ut til privat adresse etter melding om at en person skal ha knust et vindu. Politiet fikk gode beskrivelser av mistenkte fra melder og søkte i området uten funn. Da vi returnerte til gjerningsadressen for å gjøre åstedsundersøkelse, hadde mistenkte også kommet tilbake og fortsatte å utføre skadeverk. Ble pågrepet og satt i arrest. Anmeldes for forholdet. Siktede er en mann i 40 årene.
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
1
0
0
洪 民憙 (Hong Minhee) @hongminhee@hackers.pub
Public
Shared by fedicat

After reviewing FEP-5624: Per-object reply control policies and GoToSocial's interaction policy spec, I find myself leaning toward the latter for long-term considerations, though both have merit.

FEP-5624 is admirably focused and simpler to implement, which I appreciate. However, 's approach seems to offer some architectural advantages:

  1. The three-tier permission model (allow/require approval/deny) feels more flexible than binary allow/deny
  2. Separating approval objects from interactions appears more secure against forgery
  3. The explicit handling of edge cases (mentioned users, post authors) provides clearer semantics
  4. The extensible framework allows for handling diverse interaction types, not just replies

I wonder if creating an that extracts GoToSocial's interaction policy design into a standalone standard might be worthwhile. It could potentially serve as a more comprehensive foundation for access control in .

This is merely my initial impression though. I'd be curious to hear other developers' perspectives on these approaches.

Summary card of repository fediverse/fep

fep/fep/5624/fep-5624.md at main

fep - Fediverse Enhancement Proposals

codeberg.org · Codeberg.org

4
1
1
GNOME @gnome@floss.social
Public

Support for Windows 10 ends on October 14, 2025. Microsoft wants you to buy a new computer. But what if you could make your current one fast and secure again?

Check out the End of 10 initiative to learn more! If you know anyone else who might find this useful, share it with them!

endof10.org

End of 10

Extended support for Windows 10 ends in 2026. Don’t buy a new PC — revive yours with Linux. It's fast, secure, and help is available to get you started.

endof10.org · End of 10

0
13
0
1
0
0
0
0
0
0
0
0
Geoffrey Giebelhaus @geoff_eg@mastodon.social
Public

Really excited to share this image for today. I took this image on my first ever trip to last year. We ventured to the in Northern Italy for some hiking where we were greeted with freshly snow capped mountains. It made for an incredible welcome to our trip to this area.

This image has become one of my favorites from the trip. Hopefully I will return someday.

#

An image of towering mountains from the North Italian Dolomites. The snow covered peaks surround a large cirque like a crown. Blue sky and some light greens from the forest below add color. And heavy clouds sweep into the valley from the sides of the image
0
0
0
1
0
0
1
0
0
1
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
pkg update @pkgupdt@hl.pkgu.net
Public

소소하지만 내 삶의 즐거움이 되는 물건들: 메모리폼 토퍼, 와이드 샤워 헤드 그리고 좋은 비누.

이 셋은 없으면 일단 사고 본다. 비누는 한국에서 산다면 도브 센서티브가 괜찮음. 뽀득한 거 원하면 아이보리.

0
0
0
Future Eve™ @EveHasWords@toot.cat
Public

Story index:

Fantasy

SciFi

Contemp

Learn more at ChantingLureTales!

Available now at your favorite digital store!

Don't Get Seduced By A Fairy! by Ash Hollerin

books2read.com

0
0
0
0
0
0
0
0
0
헤카 @heka@baram.me
Public

미국에서 Leica D-Lux 8 카메라 가격이 $1,595에서 $2,790(!!)으로 큰 폭으로 인상. 참고로 D-Lux 8은 중국 생산 제품..

leicarumors.com/2025/05/02/the

The Leica D-Lux 8 camera is now $2,790 in the US (up $1,195) - Leica Rumors

I already reported on the new price of the Leica D-Lux 8 camera (made in China) before the official price increase caused by the proposed Trump tariffs, and I was not far off. The D-Lux 8 went from $1,595 to $2,790 in the US: B&H Photo: $1,595 (?) Adorama: $2,790 Amazon: $2,889.95 Leica Store Miami: […]

leicarumors.com · Leica Rumors

0
0
0
0
0
0
0
1
0
시아란 🌌 Private @siaranics.siaran.kr@bsky.brid.gy
Public

"1+1=3이라고 말만 했을 뿐인데 이렇게들 우르르 몰려와서 산수도 못하냐고 비난하시면 당황스럽네요... 의견도 말 못하나요? 님들같이 입틀어막는 사람들 있는거 생각해서라도 앞으로는 꼭 3이라고 사실대로 말하고 다닐거에요" 이런 사람들 온오프라인 안 가리고 분야별로 삼억팔천만명 있음

0
0
0
0
0
0
가을별 @gaeulbyul.dev@bsky.brid.gy
Public

혹시 겹칠 수 있으니 제가 제보한 걸 밝히자면, - 회원가입할 때, 비밀번호에 <, >, ", ', _ 를 사용할 수 없는 특수문자라고 안내되어있는데 실제로 사용할 수 없는 문자가 이보다 더 많은 점 - 브라우저 창 크기를 조절하면서 상단 메뉴가 오작동할 수 있는 버그 ...입니다.

0
0
0
HalJor :propride: @haljor@sfba.social
Public
Shared by Stefan Bohacek

"In 1946, renowned author Lin Yutang filed a patent for a typewriter that printed Chinese characters. This is the MingKwai typewriter, with a reasonable number of keys. By pressing two keys, eight characters from thousands in the machine's mechanical hard drive would appear in the typewriter's "magic eye" window. Pressing a third key would select from those and print the character."

neatorama.com/2025/05/04/An-Ol

An Old Typewriter Turned Out to Be a Priceless One-of-a-kind

In 1946, renowned author Lin Yutang filed a patent for a typewriter that printed Chinese characters. This is the MingKwai typewriter, with a reasonable number of keys. By pressing two keys, eight characters from thousands in the machine's mechanical hard drive would appear in the typewriter's "magic eye" window. Pressing a third key would select from those and print the character. It was the first Chinese typewriter with a workable keyboard. Lin sank his life savings into producing a prototype in the Uni...

www.neatorama.com · Neatorama

0
0
0
Harry Sintonen @harrysintonen@infosec.exchange
Public
Shared by daniel:// stenberg://

This thing works by generating fake vulnerability reports. Here are some of the qualities of the HackerOne report 3125832 sent to :
- It looks convincing at a glance, especially if you're not a subject matter expert.
- It's vague about actual repro steps. It makes it impossible for the victim project to reproduce the issue. For example, it makes up fake patches against non-existent, imaginary code.
- It refers to functions and methods that do not exist (in case someone tries to look for them). When confronted, the attacker refer to some old or new versions of components, using non-existent commit hashes.
- The report makes up some convincing functionality or names that are novel, but don't really exist.

An expert’s look at the report shows the number of discrepancies, but finding them takes time and effort. It requires attention from a subject matter expert, with limited resources.

The real exploit here is that the attacker (evilginx) exploits the fact that the victims (the orgs who paid the attacker money) don't have the capacity to perform thorough analysis and rather just pay up. TL;DR: It's cheaper to pay the bug bounty than hire an expert to perform true analysis.

Why didn't it work against the curl project? The attacker miscalculated badly. Curl project is not a company and has far greater capability in security response than your average org. Also they can smell miles away.

0
0
0
0
0
0
✧✦Catherine✦✧ @whitequark@mastodon.social
Public

did you know that GDB includes a bytecode compiler? specifically, it has a private [edit: it's documented] bytecode format used between it and the GDB server, which the latter uses to implement conditional breakpoints with complex expressions and tracepoints

every time it hits a breakpoint/tracepoint it evaluates the bytecode, which has jumps and can read arbitrary target memory, and decides whether it really was hit or not

0
0
0
0
0
0
시아란 🌌 Private @siaranics.siaran.kr@bsky.brid.gy
Public
Shared by 잉어구이

가짜뉴스와 선동과 파편화의 시대. 스스로는 순박하고 온건하고 비편향적인 입장을 취한다고 취하지만, 딛고 선 논리가 남들이 파탄내 놓은 구렁텅이인 줄을 모른다. 결국 남들이 해줄 말은 "당신 말이 처음부터 끝까지 다틀렸다" 밖에 없는데 그런 반응에는 상처입고 분노하더라... 당연함. 스스로는 소박한 진실만 말한 것인데 인신공격 수준의 대꾸가 돌아왔다고 여기기 때문임. 그런데 도대체 이 참사를 어째야하나.

0
0
0
시아란 🌌 Private @siaranics.siaran.kr@bsky.brid.gy
Public
Shared by 잉어구이

사람은 정말 온건하고 순하고 조심스러운 태도로도 개쎈혐오가짜뉴스를 말할 수 있는 것이다. 온건하다고 가만 놔 두면 온건하게 동조자가 늘어나고, 그거 아니라고 정색하고 뜯어말리면 당혹하거나 심지어 "공격받았다"며 진심으로 토라지는 사람들을... 대체 어째야 하는가.

1
0
0
0
0
0
0
0
0
Kent Navalesi ☕️ @KentNavalesi@mstdn.social
Public

I'm excited to announce that registrations are open for my online course, "The Barbarian Kingdoms (376-751)," hosted by @medievalistsMedievalists.net!

What: Six weekly Zoom sessions, starting May 29, where we'll discuss the history and culture of the Franks, Visigoths, Lombards, and others! See the module descriptions below, and feel free to DM with questions!

Where: Zoom
When: Thurs, 1:00-2:30 PM ET

Fee: $149
Registration: medievalstudies.thinkific.com/

@histodonshistodons group @medievodonsMedievodons group @edutootersEduTooters group

The Barbarian Kingdoms (376-751)

An introduction to the history and culture of the Goths, Franks, Vandals, and Burgundians. Through readings, lecture, and discussion, students will learn about the barbarian transformation of the Roman world and become conversant with current issues in the scholarship.

medievalstudies.thinkific.com · Medieval Studies Courses from Medievalists.net

0
0
0
시아란 🌌 Private @siaranics.siaran.kr@bsky.brid.gy
Public
Shared by KAGAMI🏳️‍🌈🏳️‍⚧️

가짜뉴스와 선동과 파편화의 시대. 스스로는 순박하고 온건하고 비편향적인 입장을 취한다고 취하지만, 딛고 선 논리가 남들이 파탄내 놓은 구렁텅이인 줄을 모른다. 결국 남들이 해줄 말은 "당신 말이 처음부터 끝까지 다틀렸다" 밖에 없는데 그런 반응에는 상처입고 분노하더라... 당연함. 스스로는 소박한 진실만 말한 것인데 인신공격 수준의 대꾸가 돌아왔다고 여기기 때문임. 그런데 도대체 이 참사를 어째야하나.

0
0
0
1
0
0
0
0
0
Esurio @esurio1673@c.koliosky.com
Public

https://www.kikkoman.co.jp/homecook/search/recipe/00053638/

レンジでしっとり！蒸し鶏の香味だれのレシピ・つくり方 | キッコーマン | ホームクッキング

「レンジでしっとり！蒸し鶏の香味だれ」のレシピをご紹介しています。料理レシピ満載のホームクッキングでは、今日のレシピ・献立、旬の食材のレシピ、簡単お弁当レシピ、朝食レシピなどをご紹介しています。料理レシピ検索では、食材別、キーワードなどからお好みレシピを簡単に検索いただけます。

www.kikkoman.co.jp · キッコーマン株式会社

0
0
0
나나나나미 @nnanananami@planet.moe
Public

미국 정부가 소수자 탄압하려고 기업에 압력 넣어서 다들 엎드리고 있는 와중에 애플은 아직 굴하지 않고 있는 것 같아 다행이네. apple.com/newsroom/2025/05/app

Apple introduces the 2025 Pride Collection

The new Apple Watch Pride Edition Sport Band, watch face, and iPhone and iPad wallpaper celebrate the strength and beauty of LGBTQ+ communities.

www.apple.com · Apple Newsroom

0
0
0
Autonomie und Solidarität @autonomysolidarity@todon.eu
Public

Der Bundestag hat für den Entschließungsantrag der CDU/CSU gestimmt, um Grenzschließungen für Geflüchtete und Grenzkontrollen dauerhaft durchzusetzen. Während Union, FDP und AfD diesmal gemeinsam dafür und und dagegen gestimmt haben, sollte nicht vergessen werden, dass es erst die Grünen und die SPD waren, die den Nährboden für diese autoritäre Politik geschaffen, gepflegt und gedüngt haben.

Nancy (SPD) hat seit Beginn der Ampel-Regierung versucht, über das ständige Verlängern eines Ausnahmezustandes, Grenzkontrollen permanent durchzusetzen. Grüne und SPD haben mit ihren Beschlüssen zur Bekämpfung von Geflüchteten und mit ihren Vorhaben, bis hin zur geplanten Einführung der biometrischen Massenüberwachung, eine rassistisch-autoritäre Politik der zunehmenden Staatsfaschisierung betrieben und weiter normalisiert. Was Rechtskonservative und Faschos jetzt zu Ende führen möchten, haben selbsternannte linksliberale Parteien und ihre Anhängsel die letzten Jahre eifrig vorangetragen.

tagesschau.de/inland/innenpoli

Bundestag stimmt für Fünf-Punkte-Plan der Union zur Migration

Ein von der AfD unterstützter Antrag der Union zur Verschärfung der Migrationspolitik ist im Bundestag angenommen worden. Darin wird unter anderem die umfassende Zurückweisung von Asylsuchenden an den deutschen Grenzen gefordert.

www.tagesschau.de · tagesschau.de

Autonomie und Solidarität @autonomysolidarity@todon.eu
Public
Shared by Quincy ⁂

Der staatliche "Kampf gegen Hass und Hetze" konsequent zu Ende geführt.

Die bayerische führt einen digitalen Kalender. Darin werden alle Veranstaltungen erfasst, die polizeiliche Relevanz haben könnten: größere Gerichtsprozesse oder Kultur- und Sportveranstaltungen ebenso wie politische Kundgebungen und Demonstrationen. Die Veranstaltungen werden jeweils mit Schlagwörtern versehen, um sie recherchierbar zu machen. Das soll der Polizei helfen, mögliche Gefährdungslagen besser einzuschätzen und Einsätze effizienter zu planen.

Vor knapp zwei Wochen wurden nun alle bayerischen Polizisten per Artikel im Intranet der Polizei angewiesen, ab sofort im Bedarfsfall ein neues Schlagwort zu verwenden: "gegen CDU und CSU".

br.de/nachrichten/bayern/gegen

Aufschrift auf der Seitentür eines Polizeifahrzeugs

"Gegen CDU und CSU" – Neues Polizei-Schlagwort sorgt für Kritik

Wird Bayerns Polizei im Wahlkampf für Parteipolitik missbraucht? Eine interne Anweisung löst Irritationen aus: Alle bayerischen Polizisten wurden instruiert, Veranstaltungen gegen die Migrationspolitik der Union gesondert zu erfassen.

www.br.de · BR24

0
0
0