What is Hackers' Pub?

Demystifying Ruby (1/3): It's all about threads https://lobste.rs/s/v5omb5 #ruby
https://blog.papey.fr/post/07-demystifying-ruby-01/

Forget IPs: using cryptography to verify bot and agent traffic https://lobste.rs/s/iak1lt #web
https://blog.cloudflare.com/web-bot-auth/

ルンバさんが久しぶりに自力で帰宅した。今日は良い日だ。

眠れない​​

Es ist kein(!) Qualitätsmerkmal, wenn man Sicherheitslücken, die Ehrenamtler:innen bei einem wichtigen Digitalisierungsprojekt entdecken, schnell mit einem Work-around-Patch (teilweise) schließt. Solche Projekte brauchen eine unabhängige und transparente Sicherheitsbetrachtung vor dem Start, risikobasiert und nach Stand der Technik

In Pittsburgh for #PyConUS so had to check out the Duquesne Incline. Not bad!

We automate changelog generation in CityCatalyst using a Node.js script and OpenAI. On every new release tag, a GitHub Action extracts commit messages between the latest two tags, sends them to OpenAI’s GPT model, and receives a human-friendly summary in Keep a Changelog format. This summary is inserted at the top of CHANGELOG.md and committed automatically. This approach ensures our changelog is always clear, up-to-date, and requires no manual effort.

@halcyhalcy​ here's a couple. i made 16 in total. i think i had an idea that maybe one could be for favs, one for boosts, one for follows, maybe the tritone could be for errors, etc. the timeline would be like little riffs combining together into pseudorandom algorithmic piece of music

The current state of TLA⁺ development by @ahelwerAndrew Helwer https://lobste.rs/s/auqf51 #formalmethods
https://ahelwer.ca/post/2025-05-15-tla-dev-status/

HEY! I just found the fix for the webfinger "403 forbidden” problem I have been having to get my wordpress blog working fully with ActivityPub @pfefferleMatthias Pfefferle!

Looks like for nginx based servers if you are rolling your own or you have a strict web host you need to create a location statement in your nginx config options

The code to add to your options is:

location ^~ /.well-known/webfinger {
auth_basic off;
allow all;
default_type text/plain;
try_files $uri $uri/ /index.php?$args;
break;
}

From this wordpress support question:

https://wordpress.org/support/topic/i-think-i-tried-everything-403-on-well-known/

After adding this, the test at https://webfinger.net/lookup outputs a proper response and Wordpress clears the 'webfinger' error in SiteHealth.

Yay!
#ActivityPub #Wordpress #Mastodon #Fediverse #nginx #selfhost

📚 Fair use empowers libraries, learners, journalists & creators—it’s essential to a healthy digital society.

With turmoil at the Copyright Office, @brewsterkahle urges us: don’t lose sight of fair use.

Read the post ➡️ https://blog.archive.org/2025/05/14/protect-fair-use-especially-now/

If any Mastodon instances are having trouble with their costs growing out of control, ping me and see if I can help lower your bill.

Apparently a recently closed instance was paying $300/month for hosting which is insane to read considering how small of an instance it was. When we had 40k monthly users I was paying about $120/month so an instance with less than 400 total users (not MAU) should be super cheap to run even with a few TB of storage and bandwidth.

It hurts my heart to read instances closing down over costs and finding out they’re paying more than instances 10x their size. 😢

https://newsie.social/@jeff/114513118997692099

@onepictEsther Payne @REAEU Research Executive Agency @EUCommissionEuropean Commission @CryptPad @NGIZeroNGI Zero open source funding

I just mentioned how we have let US advertisement giants become the pillars of society, and finally have a good alternative with the great support and help from the #EU Commission and dedicated institutions like @nlnet to help get funding where it is needed most: In the commons, where people know what people need.

https://social.coop/@smallcircles/114511608079927098

Then seeing the half-hearted support for this fresh and much needed approach is quite, well.. disheartening 💔

We allowed advertisement giants to become the pillars of our society. And advertise they do. They sell the naked greed of hypercapitalism.

But this is very clear: #BigTech molochs aren't pillars in any way. They're the Blob of horror movies, gobbling the lifeblood of people. Corporate social media are parasitical.

🌻 Luckily we have good alternatives.
Our #SocialWeb era begins ✊
We're in control on this #Fediverse

💪 Much help came from @EUCommissionEuropean Commission via @nlnet

Now a #Peopleverse unfolds.. 💃🕺

OH: „Nicht alles, was man in einen Mixer schmeißt, wird automatisch zum Smoothie.“ - „Doch, wenn man bisschen Joghurt dazutut?“

Die Kinder machen Pläne für Trink-Döner & Co.

ちょっとねむい

おふとんでうねうね

민주노동당이 주요 여론조사에서 지워지고 있다. 원외정당을 ‘기타 정당’으로 분류하며 호명하지 않는 여론조사 관행 탓이다. 권영국 대선후보를 배출한 민주노동당은 “최소한 대선 기간만이라도 여론을 확인할 수 있게 여론조사에 포함시켜 달라”고 호소하고 있다. www.labortoday.co.kr/news/article...

여론조사에서 민주노동당 ‘기타 정당’ 취급

おぉ！スキップ接続ってあれじゃん！
ショートカット作って入力データと出力データの"差"だけ学習させる？的なアレ（ガチ初心者なので間違ってたらごめんなさい）
生成AIの発端になったと噂のTransformerモデルでもこの知見が生かされてるとか何とか

RE: https://misskey.flowers/notes/a7t1p8i492rr00xa

Right, it's been A TIME, and it might be too late, but we have a fantastic website thanks to @natbuckley.

Anti-SXSW is vaguely go. We just need you to help make it happen.

If you'd like to run an FKFJ event, or get involved: https://fkfj.london

ねる

https://fedimovie.com/w/7nebVdSqrowwf1rAY4fZGs

Threads now lets creators add up to 5 links to profiles, track clicks https://techcrunch.com/2025/05/15/threads-now-lets-creators-add-up-to-5-links-to-profiles-track-clicks/

Es ist kein(!) Qualitätsmerkmal, wenn man Sicherheitslücken, die Ehrenamtler:innen bei einem wichtigen Digitalisierungsprojekt entdecken, schnell mit einem Work-around-Patch (teilweise) schließt. Solche Projekte brauchen eine unabhängige und transparente Sicherheitsbetrachtung vor dem Start, risikobasiert und nach Stand der Technik

Choose Science. Choose Europe.

In 2025, the Marie Skłodowska-Curie Actions will invest over €1.25B for cutting-edge research, supporting more than 10,000 researchers.

A new Choose Europe for Science pilot aims to create more stable career pathways for early-career researchers, reduce precarity, and align research roles with long-term institutional strategies.

If you're a researcher eager to bring your ideas to life, now is the opportunity.

Explore the calls → https://europa.eu/!xX9Nq7

くねくねしてたらいつの間にか3時半になるのが得意

たのしい

Threads now lets creators add up to 5 links to profiles, track clicks https://techcrunch.com/2025/05/15/threads-now-lets-creators-add-up-to-5-links-to-profiles-track-clicks/

Recommending that all Australian SaaS companies switch to this naming scheme.
https://teh.entar.net/@ckape/114504160543604880

So, heute hab ich gelernt, daß „cat $datei > lpr“ nicht mehr funktioniert. Jedenfalls nicht bei mir. Ja, ich bin alt(modisch).

Dann hab ich die Spülmaschine ausgeräumt.

Nachmittags war ich bei der Hausärztin, um festzustellen, daß mein billiges Blutdruck-Meßgerät nix taugt. Das Gerät in der Praxis wußte von höheren Werten. Oder anders: Der Blutdrucksenker hat bei mir bisher noch gar nichts bewirkt. Dosis wurde jetzt von 5 auf 10 mg verdoppelt.

Einen geplanten Besuch bei einer Orga-Sitzung hab ich gedroppt, weil der Termin bei der HA 20 min später begann als geplant und dann nochmal 15 min dauerte. Und weil meine Löffel nicht mehr dafür reichten.

Zum Abendessen gab's Obstsalat, und den mit Kokos-Kochsahne und Raspelschokolade anzumachen, war eine ziemlich gute Idee gewesen.

Schließlich bekam ich noch Tips zum Thema Bluthochdruck und Meßgeräte und hab mir ein neues solches bestellt, das dann hoffentlich richtig mißt – und dafür das Dreifache dessen kostet, was das bisherige gekostet hat …

Aber jetzt geh ich mit meinem Pott Malzkaffee ins Buch (immer noch: Terry Brooks – Star Wars Episode I: Die dunkle Bedrohung).

Habt Ihr noch einen feinen Donnerstag Abend mit normalem Blutdruck 🙂
n8-quak! 🐸​

I can’t quite get my head around this “no, actually you don’t always need alt text” thing. Seems to go against everything a certain type of Mastodon user yells at other Mastodon users about. Do they even know about this rule?! https://dewp.space/@matze/114513124884939890

Declaring a friendship to self https://lobste.rs/s/1c5g2a #c++
https://www.sandordargo.com/blog/2025/05/14/friend-self

I'm reluctant to dignify LLMs with a term like "prompt injection" because that implies it's the unusual case

prompt injection is a thing that's just gonna happen with LLMs as they stand

the security model is fundamentally stupid

1. build a great big pile of all the good and bad information in the world
2. feed it to a nondeterministic stochastic parrot
3. put a filter on the output of the parrot and block the bad stuff
4. wtf did you expect to happen, you're doing security by regex on an input you can vary freely

At #pyconus2025 ? We got some new stickers!

"Vermissen Sie das #Twitter von damals?"

Danke @afeliaMarina Weisband <3 #Mastodon

It's just three weeks to FediForum June 5-7! Join us for 3 half-days of discussions, presentations, software demos and plotting next steps with your fellow enthusiasts for a better and more open social web.

And a couple of special other things 😀. Stay tuned.

https://fediforum.org

Ich kenn mich ja bei Eishockey nicht aus. Aber Kanada vs. Österreich sollte eher klar ausgehen, oder?

/paging @Ramonsta72Ramonsta

Publication of Privacy Principles as a W3C Statement has been a long process and represents the culmination of years of multistakeholder work on this topic:
https://www.w3.org/TR/2025/STMT-privacy-principles-20250515/

In 2022 @CenDemTech welcomed the first public note: https://cdt.org/insights/cdt-applauds-recent-w3c-principles-seriously-considering-fundamental-ethical-implications-of-core-platforms/

今日のあなたのレスポンスコードは
306: (Unused) です。
MDN Docs
#httpレスポンスコードおみくじ
https://chpk.kur0den.net/play/9pq1w6jcowfn01c5

Introducing lazy trees in Determinate Nix 3.5 https://lobste.rs/s/wgn94m #nix #performance
https://determinate.systems/posts/changelog-determinate-nix-352/

ねるひつようがある

Publication of Privacy Principles as a W3C Statement has been a long process and represents the culmination of years of multistakeholder work on this topic:
https://www.w3.org/TR/2025/STMT-privacy-principles-20250515/

In 2022 @CenDemTech welcomed the first public note: https://cdt.org/insights/cdt-applauds-recent-w3c-principles-seriously-considering-fundamental-ethical-implications-of-core-platforms/

Wow, it's just a few hours till we officially kick off #PyConUS 2025 with the Opening Reception in the expo hall 🥳🐍

Will we see you there?

What's your favorite way to set up a little merch shop—prints, t-shirts, that sort of thing? Main goal is minimal overhead on my end. Want to set up something for https://rexs.nyc

과생각 안 하는 법을 과생각하는 중

전통적 의미의 '로그라이크'는 절차적 생성, 랜덤화, 퍼마데스 말고도 몰입형 시뮬레이션의 지분도 꽤 크다고 봄... 여러가지 게임시스템이 상호작용하면서 의도치 못한 결과나 창발적인 플레이를 유도하는 지점

📚 Fair use empowers libraries, learners, journalists & creators—it’s essential to a healthy digital society.

With turmoil at the Copyright Office, @brewsterkahle urges us: don’t lose sight of fair use.

Read the post ➡️ https://blog.archive.org/2025/05/14/protect-fair-use-especially-now/