What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

0
2
0
0
0
0

็ŒซใŒไฝ“ใฎไธŠใซไน—ใฃใฆๆšดใ‚Œใ‚‹ๅนป่ฆšใง็›ฎใŒ่ฆšใ‚ใŸใ€‚ใใ—ใฆ่ตทใใŸใ‚‰PCใฎใจใ“ใ‚ใซ็ŒซใŒใ„ใ‚‹ๅนป่ฆ–ใ€‚

1
0

์˜ค๋Š˜ ์šฐ์—ฐํžˆ ๋ผ๋””์˜ค์—์„œ ๋“ค์—ˆ๋Š”๋ฐ์š”.
๊ทธโ€ฆ ๋Œ€์žฅ๋™ ๊ฒŒ์ดํŠธ๋ผ๋Š” ๊ฒƒ์„ ๊ฒ€์ฐฐ์ด ํ•ญ๊ณ  ์•ˆํ•˜๊ธฐ๋กœ ํ–ˆ๋Š”๋ฐ ๊ทธ๊ฑธ๊ฐ€์ง€๊ณ  ๊ฒ€์ฐฐ ๋‚ด๋ถ€์—์„œ ๋น„ํŒ์ด ์žˆ์—ˆ๊ณ  ์•Œ๊ณ ๋ณด๋‹ˆ ๋ฒ•๋ฌด๋ถ€์—์„œ ๊ทธ๋งŒํ•˜๋ผ ํ–ˆ๋‹ค๊ณ  ํ•˜๊ณ  ๋ญ ๊ทธ๋Ÿฐ ์ด์•ผ๊ธฐ๊ฐ€ ์žˆ๋Š”๋ฐ ๋งž๋‚˜์š”โ€ฆ? ์›Œ๋‚™ ๋Œ€์ถฉ ๋“ค์–ด์„œ ์ž˜ ๋ชฐ๋ผ์š”. ์„ค๋ช…์ข€..
โ€‹:dogeza:โ€‹

0
1
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Oh this is funny.

github.com/PotatoHamm/Nero-Pro

Nero BackItUp in the Nero Productline is vulnerable to a path parsing/UI rendering flaw (CWE-22) that, in combination with Windows ShellExecuteW fallback extension resolution, leads to arbitrary code execution when a user clicks a crafted entry. By creating a trailing-dot folder and placing a same-basename script, Nero BackItUp renders the file as a folder icon and then invokes ShellExecuteW, which executes the script via PATHEXT fallback (.COM/.EXE/.BAT/.CMD). The issue affects recent Nero BackItUp product lines (2019-2025 and earlier) and has been acknowledged by the vendor.

0
0

I said my piece about Mozilla's newest adoption and promotion of fashtech in the form of AI. Please consider saying your piece as well. They might not listen, but perhaps the next open source project considering fashtech may see this reaction and think twice.

connect.mozilla.org/t5/discuss

Note: Alt text is too long for Mastodon limits. Please see reply for continued alt-text.


cgranade
cgranade
Making moves

โ€Ž14-11-2025 12:52 PM

The adoption and promotion of AI by Mozilla is, at core, both a failure of leadership and a betrayal of users and the open web in general. In particular, it must be noted that:

    AI in its current form is only possible because of stolen labor. Open source is a user freedom movement, but it's also a labor movement. Adopting and promoting AI betrays the labor principles of open source, and should be avoided on those terms alone.
    AI in its current form imposes massive, massive environmental costs, the scope of which we barely understand due to secrecy on the part of AI model vendors. Open source is, amongst other things, a means of making old or discontinued hardware work, and is to that degree, also an environmental movement. Adopting and promoting AI betrays all those who depend on a functioning environment on Earth (I dare say that's likely all of us).
    AI in its current form does not work. Time and effort spent chasing a technology that fundamentally cannot do what it promises to do is time and effort that could be spent supporting the open source community instead.

[continued in reply to this post]
0
0
1
0

Really interesting teen subculture: straightedge art kids. (They're developing IT skills just to turn off or avoid "AI" slopโ€”this gives me hope for the future)

For a lot of these kids (I've also heard them called the "AI vegans") a big college decision is coming up. And colleges, unfortunately, have middle managers who mandate fad-chasing just as much as other organizations do.

How to make a college short list that will be compatible with not being required to play with slop for 4 years?

0
0
0

Oh this is funny.

github.com/PotatoHamm/Nero-Pro

Nero BackItUp in the Nero Productline is vulnerable to a path parsing/UI rendering flaw (CWE-22) that, in combination with Windows ShellExecuteW fallback extension resolution, leads to arbitrary code execution when a user clicks a crafted entry. By creating a trailing-dot folder and placing a same-basename script, Nero BackItUp renders the file as a folder icon and then invokes ShellExecuteW, which executes the script via PATHEXT fallback (.COM/.EXE/.BAT/.CMD). The issue affects recent Nero BackItUp product lines (2019-2025 and earlier) and has been acknowledged by the vendor.

0
1
0
0
0
0

Really interesting teen subculture: straightedge art kids. (They're developing IT skills just to turn off or avoid "AI" slopโ€”this gives me hope for the future)

For a lot of these kids (I've also heard them called the "AI vegans") a big college decision is coming up. And colleges, unfortunately, have middle managers who mandate fad-chasing just as much as other organizations do.

How to make a college short list that will be compatible with not being required to play with slop for 4 years?

0
1
0
0
0
2
0

ใฏ
โ€‹:rv_blobcat_camera:โ€‹
ใ‚ฟใ‚ฐ๏ผšใƒ–ใƒญใƒ–ใ‚ญใƒฃใƒƒใƒˆ, ใถใ‚ใถใใ‚ƒใฃใจ, ใ‚ซใƒกใƒฉ, ใ‹ใ‚ใ‚‰, ใƒŸใƒฉใƒผใƒฌใ‚น, ใฟใ‚‰ใƒผใ‚Œใ™, mirrorless
ใซใ‚ƒใทใ‚ใคใ‚็އ๏ผš6.82%
https://misskey.io/play/9pcmdcebfyat037j

0
0
0
1
0
1

่ˆˆๅ‘ณๆœฌไฝใงใ‚นใƒ†ใ‚คใƒƒใ‚ฏๆŒฟใ—ใŸใ‚‰ๆ™ฎ้€šใซๅ‹•ใใ—โ€ฆไฝ•ใชใ‚“ใ โ€ฆ๏ผŸ

0
1