What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

(I also don't know where to put this one in the conversation tree) i also think i like, maybe don't think of humans as being ontologically superior inherently the way a lot of people do, so i see less inherent issue in treating them slightly differently than a person.

0
0
0
0

Two obscure Swift changes I want to note:

ASCII String literals bridged to ObjC will produce a different type in the beta OSs. This generally has no impact (other than greatly improved performance), but code incorrectly treating `NSString *` as `char *` or `SEL` may need to change (e.g. %s format strings).

A message will be logged in any situation we're applying compatibility workarounds for this, and the workaround will be disabled if you use the latest SDK version.

0
0
0
0
1

Dear and beloved Fedi friends,

I would love your input on something:

Problem:

Right now, the account recovery flow on Mastodon has some issues. Imagine this scenario: an account has 2FA setup and the owner contacts the admins/mods through e-mail, that they have lost access to the 2FA app and requesting disabling it.

We do not keep logs, nor do we retain IP addresses. So, the problem here is that if the mailbox was breached, we can either help with the recovery (not knowing the request is not legit) or we can refuse to help with the recovery.

Possible solution:

It wouldn't be that much trouble to add some custom fields to the account page, where the account holder can fill in their wish as to how to verify such a request (think something like alternative means of contact, some signing key, etc).

Question:

Should I implement this (and trying to upstream it with a PR) or just put a policy in place like "your account security is your responsibility, can't help you if you lose access to your MFA"?

0
0
0
0
0
0

@codinghorrorJeff Atwood I'm frustrated by the "%" framing.

There is that threshold of fortune beyond which more $ means literally nothing to your wellbeing, you are set for life.

To someone with $10M, giving away 99.99% of their wealth means living on the street. To Bill Gates, it's a level of living most Americans don't even aspire to. 99.99% means different things in those two contexts. More power to BG, but I'd rather live in a society where no individual has the burden of making that choice alone.

0
0
0
0
0
0

What I'm listening to today: "Akai S950 - Deep House Music - Vintage Sampler", MikeSynth

Hype little house techno fragment made on a plausible circa-90s vintage hardware setup (1986 Akai rack sampler sequenced by a 2003 Akai sequencer, mixing board as an instrument). Really refreshing vibe, has a bit of a trip-hop feel to me.

youtube.com/watch?v=Ij2r1C-kr58

What I'm listening to today: "Volume", Pylon

@onelsonOwen Nelson linked this and I don't know anything about it. It rocks! When I started typing this post I was gonna say something about krautrock but in fact it turns out she is *not* singing in German, only indistinctly. Wikipedia says this is from Athens, Georgia. Well that explains a lot. Cool crisp Clashy vibes that seem to predict everything that's gonna happen in pop music in the ten years after it was recorded (that's 1980)

youtube.com/watch?v=Kp57WziV07g

0
0
1
0
0

Out of curiosity: are IPv6 addresses some kind of wild west, unclaimed territory?

When trying to look up who owns some of them that I see in my server logs, I frequently run into "the big void" it seems.

For example: 2200:2242:2064:246::42:6

ipinfo.io says... no ASN, no hostname, no nuffin' available.

Similarly, IP Netblocks says it's part of the range :: - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff (no shit!😂) and that's all.

Can anyone shed some light on this?

0
0
0

zizmor v1.10.0 is released!

this is a *huge* new release in terms of features, bugfixes, and enhancements. just to highlight a few:

* zizmor's new experimental fix mode is now available! users can use `--fix=[MODE]` to control it; see the docs for more: docs.zizmor.sh/usage/#auto-fix

* the new anonymous-definition audit flags unnamed workflows and jobs for the pedantic persona: docs.zizmor.sh/audits/#anonymo

* zizmor's location/fixture core has been rewritten to support "subfeatures," meaning that many audits now produce much nicer/more precise finding renders that are easier to read

read the full release notes here: docs.zizmor.sh/release-notes/#

0
0
0
0
0
0
0
0
0
0
1
0

Woohoo! After years of trying I finally managed to grab the scrollbar on a document on iPadOS and scrub up and down. Sadly I now have to let go of it and it may be years before I can scrub through a document again.

0
0
0
0

Hot take: I don't think a useful response to the open source maintenance crisis is 'throw money at people'. One reason is that there's not reliable full time paid work maintaining things for all of the many, many scattered maintainers out there.

The real answer is 'corporations use less open source code', but that's the one answer corporations don't want to hear. (But they're going to be forced into it by eg the EU CRA.)

0
0
0
0

zizmor v1.10.0 is released!

this is a *huge* new release in terms of features, bugfixes, and enhancements. just to highlight a few:

* zizmor's new experimental fix mode is now available! users can use `--fix=[MODE]` to control it; see the docs for more: docs.zizmor.sh/usage/#auto-fix

* the new anonymous-definition audit flags unnamed workflows and jobs for the pedantic persona: docs.zizmor.sh/audits/#anonymo

* zizmor's location/fixture core has been rewritten to support "subfeatures," meaning that many audits now produce much nicer/more precise finding renders that are easier to read

read the full release notes here: docs.zizmor.sh/release-notes/#

0
0
0
0
0
0
0
0
0
0
0
0
0

‘카라’ 활동가는 이 드라마를 보며 위로가 아닌 분노를 느꼈다고 했습니다. 드라마 ‘노무사 노무진’을 연출한 임순례 감독이 그를 부당징계하고 그가 속한 노동조합을 공개적으로 비난한 ‘사용자’의 일원이었기 때문입니다.

‘노무사 노무진’ 임순례 감독의 노조 탄압 흑역사

0
0
0
0