What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

1
0

it's frustrating that these two things are true:

1. learning rust has made me much more able to reason about and detect concurrency bugs in JS

2. I do not know how to convey this ability to other people beyond telling them to learn rust

0
2

took an existing regex that catches sql injections and added on to it.

/[^\x3c]*?(?:\x27|%27|\x2d{2}|%2d%2d)?(?:(?:S(?:HOW.+(?:C(?:UR(?:DAT|TIM)E|HARACTER.+SET)|(?:VARI|T)ABLES)|ELECT.+(?:FROM|USER|SLEEP|CONCAT|CASE))|U(?:NION\x20SELEC|PDATE.+SE)T|DELETE.+FROM|INSERT.+INTO)|S(?:HOW.+(?:C(?:HARACTER.+SET|UR(DATE|TIME))|(?:VARI|T)ABLES)|ELECT.+(?:FROM|USER))|U(?:NION.+SELEC|PDATE.+SE)T|(?:NULL(?:\x2c|%2[cC])){2,}|(?:\x2f|%2[fF])(?:\x2a|%2[aA]).+(?:\x2a|%2[aA]).+(?:\x2f|%2[fF])|CONCAT.+SELECT|EXTRACTVALUE|UNION.+ALL)/i it's an arcane mess, but it catches a good bit.

0
0
0

So ARPANET had a famous "Flag Day" where they switched over to TCP/IP in 1983; it required a simultaneous switchover of all host machines to the new protocol. And I know that "flag day" has since referred to big changes like that in networked systems. I assumed the name referred to some bitwise flags set in packet headers. Turns out, the term comes from Multics, when similar coordination was required for an encoding change. It happened on actual US Flag Day 1966!

en.wikipedia.org/wiki/Flag_day

0
0
0
0
2

so normal people aren't conscious of making eye contact the entire time they're doing it and constantly calculating how long they should do it and wondering if they're doing it right and constantly asking 'is this good? have I done it long enough? should I stop? is it weird now?'

huh

0
0
0
0

okay. back from vacation, done with a very unpleasant 24-hour stomach bug, done with post-flight headache, almost done with this annoying nechache, starting to feel like a normal human and contend with the 200+ tasks that have piled up in my weeks on the road. I guess I have a little bit of breathing room here so I will just have a look at what is going on in the news first…

… okay so more puking it is then

0

Eyesight going? Just hate how tiny _everything_ is getting? Want some fucking usability in your daily compute? Use a Firefox based browser and want a bigger fucking scrollbar?

here:

about:config

widget.gtk.overlay-scrollbars.enabled = false
widget.non-native-theme.gtk.scrollbar.thumb-size = 1
widget.non-native-theme.scrollbar.style = 4
widget.non-native-theme.scrollbar.size.override = 16

0

antimemetics, ai-induced paranoia

looks like the SCP Foundation has breached containment, which is the most meta thing I have read in a good long time.

futurism.com/openai-investor-c

Entirely related, I'm happy to offer my services as an antimemetics consultant; contact me to negotiate a fee for such engagements.

0
0
0
0

a pragmatist is someone who realizes you can absolutely place an artillery battery atop the unnavigable mountain if your corps only carries it piece by piece on foot

one who calls themselves a pragmatist but says that difficult thing is unreasonable simply wraps their despair in a fiction of reason

0
0
0
0

FASPの何かが動いてるんだねえ (keyフィールドのURLを加工してあります)

method=GET path=/users/zundan/statuses/114872982113141586 format=json controller=StatusesController action=show status=200 allocations=79718 duration=365.58 view=0.14 db=7.78 key=https: //discovery.joinmastodon.org/fasp/actor#main-key

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1

このところ日本の交通機関の乗車券としてNFC付きの物理クレジットカードを使えるようになったという記事をいくつかみかけた。NFCでクレカから得られる公開鍵があれば、それをキーとして交通機関側で有効な乗車券を確認したり、もっと慎重にするならデジタル署名で私有鍵があることを検証したりするのかしら、と思って読み進めるとGoogle Payでは利用できないとのこと。買い物のときとは違うプロトコルがあるんだろうか…

カードのタッチ決済で1日乗車券「Pass Case」に入場チケット機能 - Impress Watch
https://www.watch.impress.co.jp/docs/news/2031078.html

0
0
0
0
0
0
0
0

At 2024, our volunteers did a lot of work such as: video production and editing, translation, and transcribing. Other conferences work AV team, but PyLadiesCon didn't. It was all volunteers and a lot of work.

This year, we're trying to ease volunteer overwork, so we contacted AV vendor, asked what it would cost them to do all of this.
One vendor said 8K - 13K USD 😵

Moral of the story:
- Say thanks to volunteers.
- Sponsor conferences.
The end.

0

What I'm listening to today: "Level 3", Jim Andron

The Phillips CD-I is one of the most infamous video game system failures ever, and it hides a secret: *The CD-I Tetris game had a bizarrely kind of amazing soundtrack.* 10 tracks (I also love "level 0") of the kind of pure vibes "Vaporwave" was trying to chase in the 2010s slowing down 80s r&b. This version comes pre-slowed down! Strange murky easy-listening swamp jazz, general MIDI instruments only

youtube.com/watch?v=ZRVEtOL6Kh

What I'm listening to today: "Wanted", Hiromi

Some chill loungey jazz by a Japanese pianist and her band. Wonderful feel.

This is the kind of music that trip hop was processed from and I believe trip-hop fans should listen to some of the raw uncut stuff once in a while, perceive the woman who casts the shadow. Actually I'm not sure there ARE any trip-hop fans under 40. Maybe liking Portishead in 2025 is the equivalent of liking jazz in 1998. But I did like jazz in 1998

hiromimusic.bandcamp.com/track

0
0
0
0
0
0

I used to characterize my safety in life as being a consequence of being better at many things than other people

And as much as that is materially somewhat true in our current system, it's unhealthy as hell to base so much in your own psyche on comparison with others. (Luckily the really toxic behaviors that can stem from this I rarely exhibited outwardly, but I did a lot of damage to myself)

So now I realize I am legitimately amazing at certain things, and I would like to find more ways to help others be amazing at some of those things too

0