Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.
I AM 모짜렐라
what's up tanglers‽ most of y'all probably know that we've been busy building CI, and we're finally at a stage where we can invite some users to self-host "spindle"—the new workflow runner—or to run builds on our hosted spindle instance. ✨ feel free to reply down below if you'd like an invite!
My imagination makes me human and makes me a fool; it gives me all the world and exiles me from it. - Ursula K. Le Guin
Supabase MCP leaks your entire SQL Database, a lethal trifecta attack
Link: https://simonwillison.net/2025/Jul/6/supabase-mcp-lethal-trifecta/
Discussion: https://news.ycombinator.com/item?id=44502318
My imagination makes me human and makes me a fool; it gives me all the world and exiles me from it. - Ursula K. Le Guin
For today's #ThankYouTuesday, I'd like to thank everyone who supports the Fediverse. So, that means *you*. Yes, you, the one reading this.
Thank you!
The Fediverse truly is for everyone: if you don't have the skills or means to set up your own instance, you can join one of the public instances that aligns with your aspirations. If you can and want to, you can create your own instance, and thanks to lightweight (and interoperable) software, you can do it with spare hardware or very affordable VPS.
So thank you to all of you, friends of the Fediverse!
#Fediverse #Mastodon #snac #GoToSocial #Wordpress #Mitra #Akkoma #Pleroma #Honk #Peertube #Pixelfed #TooManyToEnumerateHere
Kanon: Im Jahr 39 VSY veröffentlichte die Twi'lek-Band Green Way das Kultalbum »Wookiee«
Tom is now listening to Three Years
https://open.spotify.com/track/33CqNRZlopqLmSDt3PeuO2
if memcpy(3), why no mempste(3)?
if memcpy(3), why no mempste(3)?
https://github.com/fedify-dev/fedify/issues/59
아..... 이걸 밟았다....
CVE-2025-48384: Breaking Git with a carriage return and cloning RCE
Link: https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384
Discussion: https://news.ycombinator.com/item?id=44502330
Smollm3: Smol, multilingual, long-context reasoner LLM
Link: https://huggingface.co/blog/smollm3
Discussion: https://news.ycombinator.com/item?id=44501413
Proud parent moment: the 15yo got a 5 on his AP Human Geography exam. One of the first things he uttered unprompted upon learning it was, "Should I email my teacher to let her know and thank her?"
yes, duh? I'm thankful to be raising thankful kiddos. 🥰
On Unix-like platforms, if you use git clone --recursive on an untrusted repo, it could achieve remote code execution. Update to a fixed version of git and other software that embeds Git (including GitHub Desktop) https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384
Tom is now listening to Storm To Weather
https://open.spotify.com/track/4EP14yK480A8l7ZuhA3xZN
Proud parent moment: the 15yo got a 5 on his AP Human Geography exam. One of the first things he uttered unprompted upon learning it was, "Should I email my teacher to let her know and thank her?"
yes, duh? I'm thankful to be raising thankful kiddos. 🥰
🦀 New workshop at #rustconf 2025!
✨ Rust at The Edge: AI Development, Edge Deployment, Real World Inference
✅ Build & deploy AI models on Raspberry Pi with Rust
✅ Use Candle, Mediapipe-rs, WasmEdge, Hugging Face
✅ Local-device LLMs & privacy-preserving computer vision
You don't want to miss this.
Sept 2 | Seattle
https://ti.to/rustconf/2025?source=mastodon
Seats are limited. Add to your registration now!
A bit long, but please read the introduction to this (not quite yet finished) paper: https://thephd.dev/_vendor/future_cxx/papers/C%20-%20Functional%20Functions.html
Feedback welcome. I still need to write a section on how it works in ISO C terms, but this is mostly to cover the existing situation.
@annaDr. Anna Latour that's so cool! I don't link my notes as much as I should and end up with mostly orphan nodes.
@jeromechooJerome (He/Him) There is no bad way of doing things, as long as you write 😊 @annaDr. Anna Latour
I'm documenting as I go making changes to my home network in Netbox.
If I was getting paid to do this, it would be tedious as hell because I would probably be documenting a pile of bullshit that made sense to managers so it won the bidding war against sanity.
But since it is my baby entirely, this is a lot of fun.
They say do what you love, the problem is, I can't get paid to build this level of quality.
Just grabbed my #FediCon ticket! Excited to meet up with all you wonderful folks helping to build this place 🫶🏻😊🥳
Firefox is fine. The people running it are not
Link: https://www.theregister.com/2025/07/08/firefox_isnt_dead/
Discussion: https://news.ycombinator.com/item?id=44499057
「お遊びは終わりにしましょう」「お遊びですって？なめられたものね、私は本気よ」「私とて本気……つまりこれは誰も遊んでいないところにのみ生じるお遊び、いわばORそびではなくNORそびだったと」「？」
I'm documenting as I go making changes to my home network in Netbox.
If I was getting paid to do this, it would be tedious as hell because I would probably be documenting a pile of bullshit that made sense to managers so it won the bidding war against sanity.
But since it is my baby entirely, this is a lot of fun.
They say do what you love, the problem is, I can't get paid to build this level of quality.
in our efforts to make the linux desktop more gay, i'm pleased to announce that we're probably moving wayback to freedesktop.org imminently
Kanon: Im Jahr 39 VSY veröffentlichte die Twi'lek-Band Green Way das Kultalbum »Wookiee«
Previous Action: 🅰
TypeScript 5.9 Beta just went out! Try it in your project and let us know what you think:
https://devblogs.microsoft.com/typescript/announcing-typescript-5-9-beta/
ねないとな
にゃーん
Alternative social networks like the fediverse and Bluesky have constructed a narrative of how growth of the network happens: when Musk does something particularly evil or stupid, people migrate in a wave looking for an ethical alternative. But what happens when that pattern breaks down?
I look at how this narrative came to be, how it reflects a specific time period, and how this period might just be over now
https://connectedplaces.online/growth-narratives-on-the-new-social-networks/
Growth narratives on the new social networks
The narratives that networks like the fediverse and Bluesky have about themselves how their network grows are a snapshot of a specific moments in time. How do these narratives evolve as the circumstances change again?
connectedplaces.online · connectedplaces.online
Link author: 
Laurens Hof@laurenshof@connectedplaces.online
Operating a Certificate Transparency log is now within reach of many organizations.
I wrote up the requirements: essentially one small server process, a couple people, and the capacity to host 3-5 TB of static files. https://words.filippo.io/run-sunlight/
I'd love to chat with anyone who's considering running one!
나는 오늘도 눈물을 머금고 docker system prune 타닥타닥 친다..
django channels에서 jwt authentication을 쓰고 싶은데
어카지
Just upgraded my server to #Mastodon v4.4.0 - worked like a charm!
Thanks for all the hard work - I'm excited to explore the new features!
ねるのめんどくさい
Just upgraded my server to #Mastodon v4.4.0 - worked like a charm!
Thanks for all the hard work - I'm excited to explore the new features!
A Python Application that displays all the information about all your movies in the command line. Install it:
```
pip install moviemon
moviemon
```
https://github.com/iCHAIT/moviemon?tab=readme-ov-file
A Python Application that displays all the information about all your movies in the command line. Install it:
```
pip install moviemon
moviemon
```
https://github.com/iCHAIT/moviemon?tab=readme-ov-file
내스.. 잠.. 자고싶어..
내스.. 잠. 못자..
Does #FreeBSD have some kind of sshd connection throttling mechanism that is outside the PerSourcePenalties config? (I set mine to 'no')
Use blacklist is set to no.
pf is not running either.
Getting really strange intermittent timeouts where I just can't log in yet I can get to the banner with telnet on port 22.
Some PAM thing with FreeBSD perhaps?
Running tcpdump, the FreeBSD machine is constantly sending its own list of KexAlgorithms until the connection times out.
FreeBSD is based sshd: 9.9p2
Connecting client is Linux openssh 10.0p2
Looking North up the West coast of Orkney along the cliffs of Yesnaby to Marwick and beyond. There’s a good swell coming ashore after several days of strong winds.
I really need to put my face on more often
One might imagine that CHERI and Wasm are similar technologies, since they both talk a lot about security and capabilities and so on.
However, CHERI works by making Unix processes safer, while Wasm works by not having Unix processes at all. It's "take the C virtual machine and make pointers smarter", vs. "make a new virtual machine". There is some overlap in the problems they can solve, but very roughly speaking, they work in opposite ways.
一般 Kyungmi Ahn ꉂꉂ(ᴖᗜᴖ*) 
Quincy
Sara Joy 
✧✦Catherine✦✧
洪 民憙 (Hong Minhee)
くろでん
