Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.
First Malicious MCP in the Wild: The Postmark Backdoor Stealing Your Emails
L: https://www.koi.security/blog/postmark-mcp-npm-malicious-backdoor-email-theft
C: https://news.ycombinator.com/item?id=45395957
posted on 2025.09.27 at 10:23:12 (c=1, p=5)
LLM, Korea
I do think having more LLMs is better for most people. Rather than just having a small number of organizations in control of the LLMs.
Hopefully, some of these result in more open-source LLMs — that people could run locally.
#ChatControl #Science #Surveillance #Europe #Politics #Security
An open letter to the EU by almost 700 scientists calls for the rejection of proposed chat control measures. From the text:
"... Achieving current security and privacy of digital communications and
systems has taken decades of concerted effort by researchers, industry, and policy makers.
There is no doubt that this proposal completely undermines the security and privacy protections
that are essential to protect the digital society. ..."
The letter was also in the news (
@heiseonline).
You can still sign (PhD or publication track record), currently there are 660+ signatures →
https://csa-scientist-open-letter.org/Sep2025
Was a lot of fun to see pdsmoover.com traffic was at the same hour this post was made.
RE: https://bsky.app/profile/did:plc:yk4dd2qkboz2yv6tpubpc6co/post/3lzr2xzn6o223
Just in the past few minutes, we had confirmation of a family evacuating on a road inside a vehicle when it was struck by a drone missile. Four people were reported killed on the spot.
Other people on the road rushed to the vehicle while it was still engulfed in flames, helping those who survived the attacks and transferring them to the hospital.
마드리드 더비 재밌네 ㅎㅎ
キアゲハさんも来たけどこっちはつれなかった
#マストドン写真部 #photography #eosR8 #RF70200F4 #bloomscrolling #butterfly #彼岸花 #曼珠沙華
"Having already attacked judges, lawyers, media companies and universities, Trump now sets his sights on civil society."
https://www.theguardian.com/commentisfree/2025/sep/27/trump-attack-george-soros
August Gaza ceasefire proposal
#にゃんぷっぷー
The FBI has fired a group of agents who kneeled during a DC civil rights-related protest in the wake of George Floyd's death in 2020. https://abcnews.go.com/Politics/fbi-fires-agents-kneeled-protest-after-george-floyds/story?id=125985792
The Other Linux Logo
Link: https://ecogex.com/the-other-linux-logo/
Discussion: https://news.ycombinator.com/item?id=45395499
"Having already attacked judges, lawyers, media companies and universities, Trump now sets his sights on civil society."
https://www.theguardian.com/commentisfree/2025/sep/27/trump-attack-george-soros
Would you like to see full default interoperability between #ATproto and #ActivityPub without a bridge? (what's preventing this...)
Strudel's audio engine is SuperDough (2023) mostly by 
@froos, which is based on SuperDirt (2015) mostly by 
@juliantelephon, which is based on 'dirt' a sampler made by me and originally called 'datadirt' (2005), but very heavily based on MSG (2001) by @adeward
Some of MSG's features got lost in translation, like line hum (configurable 50Hz or 60Hz) and hiss, and a weird synth controlled by a four-character string, here's the docs for that:
>make [name] from [synthcode] speed [rate]
Creates a new (or, if it already exists, modifies an existing) synth
using the four-digit synthcode. The first digit defines the waveform:
s for sine, t for triangle, q for square and r for random. The next
three digits range from 0.0 (a) to 1.0 (z) and define, respectively, the
pulse width, pulse amplitude, and waveform decay. Thus, using only
four letters, any number of FM-like synthesis sounds can be generated.
Here are a few examples:
'qaaa' - solid square
'qaaz' - sharp pulse (square with maximum decay)
'qmmz' - sharp pulse with 50% resonant pulse
'tilt' - triangular with sharpish edge synth
'slub' - smoothish sinusoidal waveform
* MSG: https://cors.slab.org/MSG-1.10.tar.gz
* datadirt: https://cors.slab.org/datadirt_1.0.0.tar.gz
* dirt: https://codeberg.org/uzu/dirt
* superdirt: https://github.com/musikinformatik/SuperDirt
* superdough: https://codeberg.org/uzu/strudel/src/branch/main/packages/superdough
idk if any mutuals have/want a newsletter and want to switch to Ghost, but I will literally help you migrate to Ghost from your static site, Substack, whatever for free; just because I think Ghost and its recommendation network and its ActivityPub features are all so awesome 🙏
I *really* want to get the network effect going with an open-source platform and leave Substack in the dust. So yeah hmu lol
I want to allow my bots' posts to be quoted.
Do I need all these interaction policies - or can I just have the simplified interactionPolicy?
국밥집 왔다!
写真なんもわからん #Misskey写真部
"Food was never scarce for our colony—indeed, it has rarely been the limiting factor in our growth. Our constraints have always been space, material and information."
Having fun writing this morning.
Em 
shared the below article:
Privacy Guides @news@www.privacyguides.org
This Week in Privacy #20
Read more →
I know there's a general "cause fatigue" with the current state of the world, and I feel it too.
But in my years working in privacy,
I don't think I've seen anything as terrifying as this European Chat Control proposal. And I'm not even European.
Everyone needs to pay
much more attention and be much more worried and outraged about this.
This proposal is the most dystopian glimpse into a horrible authoritarian future I have seen so far in the West.
It looks dismal, but we can still stop it
if we all work TOGETHER NOW ✊
There isn't much time left though,
so don't put it to next week.
Democracy dies in silence.
The final vote is on October 14th,
but media and representatives need to receive your messages NOW, so they have enough time to act on it.
#ChatControl #Privacy #Democracy #HumanRights #MassSurveillance #StopScanningMe #EUpol #UKpol #USpol #CanPoli
스카이림 플레이 사이클
1. 모드를 백만개 설치한다
2. 실행이 안 된다
3. 며칠동안 트러블슈팅한다
4. 드디어 실행이 된다!
5. 휴 재밌었다 삭제한다
기후위기로 지표가 살기 불가능해져서 모두 실내/벙커 내에서 생활하는 상황 등
모두 태양을 보지 않고 인공적인 빛으로 살게 되는 세상이 되면
지구의 모든 조명을 동기화하면 타임존을 하나로 통일해도 되지 않을까?
Quiet Life (2024)
Refugee family in Sweden faces trauma after youngest daughter falls into unexplained coma when asylum denied.
https://www.imdb.com/title/tt33030320/
Strongly recommended.
How many valid JSON strings are there?
L: https://qntm.org/jsoncount
C: https://news.ycombinator.com/item?id=45371359
posted on 2025.09.25 at 06:47:24 (c=0, p=6)
1/
An awkward thing about trying to apply the label "OpenSocial" exclusively to Bluesky or AT-Protocol is —
흡연자 분들께.
남에게 피해만 주지 마십시오. 그럼 피우시는 걸 추천.
언론부터 유튜버들까지 전부 카카오톡의 새 업데이트를 욕하고 있는데
진짜 그 담당자는 이게 잘 될 줄 알았던건가
사실 인텔 울트라7 시리즈2 265K 은 특정 용도에서 가성비가 좋아 보이는데, 문제는 "특정 용도"라는것이 일반적인 사용 패턴에서는 해당되지 않는다는 것입니다. 
오늘 에버랜드 돌아다니면서 보니까, 요즘 무슨 향수 브랜드? 제품? 유행 타는게 있나요? 죄다 다른 사람들인데 같은 향수 냄새가 남. 그것도 엄청 많은 사람들이.
윌이 아니라 반려견용 간식 왈이라니 웃기다
아 쫌 제발 꺼져
Would you like to see full default interoperability between #ATproto and #ActivityPub without a bridge? (what's preventing this...)
AirPodsが二つあると
一台のiPhoneで同じ曲聞けます。
しかもそれぞれ好きな音量で
#NL #Amsterdam #kamer #gezocht
Onze dochter (student HvA) moet helaas vrij plotseling haar kamer uit. Als iemand een kamer weet in Amsterdam, of een appartement met twee slaapkamers waar ze met een mede-student kan wonen, dan hoor ik het heel graag! Prijs per maand tot maximaal ongeveer 1250 inclusief, per persoon. Binnen de ring of nét daarbuiten, niet in Noord, Bijlmer, diep in Nieuw West, etc. Beetje een buurt waar ze relatief veilig ‘s nachts naar huis kan dus.
(Boosten mag, graag zelfs!)
さて、そろそろ乗りますぜ
A dream I had last night
Someone found a type signature for a function which “elegantly cut through problems like a lightsaber” but whose implementation and output we couldn’t understand.
最近は台湾の新幹線乗ってみたいのですがこっちも早めに行かないと乗れない事態に陥りそう
You may now kiss the bride.
What if all long term contracts were sealed with a kiss?
You may now kiss the landlord.
You may now kiss the car salesperson.
You may now kiss the recruiter.
You may now kiss the mortgage broker.
おやすみ
안럭키스케베 왜 안 럭키하냐면 전 확실하게 안 럭키하기 때문입니다...................... 이건 내 전공이 아니다...........................
高校時代ロシア号乗ってウラジオストクからモスクワまで行ってみたいなぁと思ってたけどもういけなくなってしまった
생각해보니 이거 자체가 이미 트라우마라는 증거 아닌가 싶어졌다. 이거 당연시하는 순간 ‘원래 그래‘라는 이유로 트라우마를 무시하는 게 아닌가? 싶어지고.
RE: https://bsky.app/profile/did:plc:dsbgris6alhgrfz5z5sme63u/post/3lzt33ecjic2f
아무래도 ‘김정은이 아니라 김정은 할아버지가 와도 …’라고 말하는 순간 뭔가 잘못되었음을 깨닫게 되죠 …
RE: https://bsky.app/profile/did:plc:dsbgris6alhgrfz5z5sme63u/post/3lzt33ecjic2f
☑️ 
ふゆきまゆ
wakest ⁂
즈눅
맹꽁이
Andy Piper
Woojin Kim
Alice I. Cecile
