What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
18
0
0
0
0
The Real Grunfink @grunfink@comam.es
Public

I've just published version 2.83 of , the simple, minimalistic instance server written in C. It includes the following changes:

After receiving a follow confirmation, a bunch of posts from that account are requested and inserted into the timeline as context.

Continuously failing instances are marked as broken after a given number of days (see snac(8) on how to tune this counter). Incoming activity from any of these instances resets the counter.

Fixed a nasty bug that incorrectly deleted private local posts in certain cases.

Scheduled posts can now be sent from the command line (see snac(1) for more information on how to do it).

Docker: add timezone, new examples for building and complete Swarm mode stack with Traefik (contributed by daltux).

Fixed timezone names (contributed by dharmik).

Documented the update command (contributed by xvello).

https://comam.es/what-is-snac

If you find useful, please consider buying grunfink a coffee or contributing via LiberaPay.



Summary card of repository grunfink/snac2, described as: A simple, minimalistic ActivityPub instance written in portable C

snac2

A simple, minimalistic ActivityPub instance written in portable C

codeberg.org · Codeberg.org

0
0
0
0
0
0
abadidea @0xabad1dea@infosec.exchange
Public

[repost of an old favorite]

robot: why are children like that

human: imagine if it took 20 years to build your processor, component by component… but it was trying to execute your operating system the entire time

robot: ada lovelace christ

0
0
0
0
0
0
1
0
0
Lesley Lai @lesley@mastodon.gamedev.place
Public

@dabeazDavid Beazley I came across your Ray Tracing videos on Rust Weekly. Really cool stuff!

BTW, I think if you pass `box<dyn Hittable>` to `HittableList`'s `add` method (and boxing outside), you can avoid the lifetime annotation for `HittableList`

That said, working with trait objects in Rust often feels more cumbersome than using dynamic dispatch in OOP languages (I think this is because Rust uses fat pointers rather than embedding the vtable in the object)

0
0
0
0
0
0
한겨레 @hanibsky.bsky.social@bsky.brid.gy
Public

최근 무단 소액결제 피해가 발생한 KT가 회사 서버 해킹 사실을 인지하고도 관련 기관에 늑장 신고한 것으로 확인됐습니다.

KT, 해킹 알고도 사흘 뒤 늑장신고…“부서 간 칸막이...

KT, 해킹 알고도 사흘 뒤 늑장신고…24시간 내 신고 규정 어겨

최근 무단 소액결제 피해가 발생한 케이티(KT)가 회사 서버 해킹 사실을 인지하고도 관련 기관에 늑장 신고한 것으로 확인됐다. 케이티는 19일 보도자료를 내어 전날(18일) 밤 23시57분 한국인터넷진흥원(KISA)에 서버 침해 흔적 4건과 의심 정황 2건을 신고했다고

www.hani.co.kr · 한겨레

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Frédéric Jacobs @fj@mastodon.social
Public

Why did you become an academic?

Ah, yeah, the great academic freedom of shutting up, locking down your social media, and “keeping things positive".
fed.brid.gy/r/https://www.404m

Union Warns Professors About Posting In the ‘Current Climate’

Academic workers are re-thinking how they live and work online after some have been fired for criticizing Charlie Kirk following his death.

www.404media.co · 404 Media

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Leah Rowe is not a Rowebot @libreleah@mas.to
Public

Fun fact: did you know passports were not required for travel before WW1?

en.wikipedia.org/wiki/Passport

During WW1, governments made them mandatory to monitor their borders more closely. After WW1, there was even talk of abolishing them!

But WW2 came and afterward, they became entrenched.

So next time you hear about government doing deals with each other for immigration/trade, note that they are merely giving you back a subset of freedoms that they already took away themselves.

Passport - Wikipedia

en.wikipedia.org

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
George @deathlibrarian@glammr.us
Public

A little PSA: if your library of choice is facing funding cuts, don't hold off on using their services because you're worried it'll put pressure on their existing funds.

Take advantage of everything and help them get some lovely stats to help them demonstrate impact as they fight back! If it looks like they're not being useful to folks, they'll get cut!

Don't do the cost cutters' jobs for them!

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Stefano Marinelli @stefano@bsd.cafe
Public

5 days to go!
Secure e-mail stack with OpenSMTPD, Rspamd, Dovecot – on FreeBSD.

it-notes.dragas.net/2024/03/08

Make your own E-Mail server - Part 1 - FreeBSD, OpenSMTPD, Rspamd and Dovecot included

Make your own E-Mail server - Part 1 - FreeBSD, OpenSMTPD, Rspamd and Dovecot included

it-notes.dragas.net · IT Notes

Link author: Stefano Marinelli@stefano@illumos.cafe

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Hacker News 100 @hn100@social.lansky.name
Public

AI tools are making the world look weird

Link: strat7.com/blogs/weird-in-weir
Discussion: news.ycombinator.com/item?id=4

WEIRD in, WEIRD out

WEIRD in, WEIRD out - STRAT7

Why today’s AI thinks American - and why that’s a problem. This provocative read from STRAT7 explores how generative AI tools mirror a narrow slice of humanity - WEIRD cultures and what that means for global insight, research and innovation. Discover how to protect cultural nuance in an automated world.

strat7.com · STRAT7

0
0
0
0
0
0
0
0
0
Bill @Sempf@infosec.exchange
Public
Shared by Cat 🐈🥗 (D.Burch) :blobcatrainbow:

What does @cR0wcR0w :cascadia: say? Hack more AI shit or something?

Well, here ya go. (Actually gonna play with this tomorrow on POINT's AI, Chiron.)

arxiv.org/abs/2508.17155

arXiv logo

Mind the Gap: Time-of-Check to Time-of-Use Vulnerabilities in LLM-Enabled Agents

Large Language Model (LLM)-enabled agents are rapidly emerging across a wide range of applications, but their deployment introduces vulnerabilities with security implications. While prior work has examined prompt-based attacks (e.g., prompt injection) and data-oriented threats (e.g., data exfiltration), time-of-check to time-of-use (TOCTOU) remain largely unexplored in this context. TOCTOU arises when an agent validates external state (e.g., a file or API response) that is later modified before use, enabling practical attacks such as malicious configuration swaps or payload injection. In this work, we present the first study of TOCTOU vulnerabilities in LLM-enabled agents. We introduce TOCTOU-Bench, a benchmark with 66 realistic user tasks designed to evaluate this class of vulnerabilities. As countermeasures, we adapt detection and mitigation techniques from systems security to this setting and propose prompt rewriting, state integrity monitoring, and tool-fusing. Our study highlights challenges unique to agentic workflows, where we achieve up to 25% detection accuracy using automated detection methods, a 3% decrease in vulnerable plan generation, and a 95% reduction in the attack window. When combining all three approaches, we reduce the TOCTOU vulnerabilities from an executed trajectory from 12% to 8%. Our findings open a new research direction at the intersection of AI safety and systems security.

arxiv.org · arXiv.org

0
0
0
0
0
0
0
0
0