What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

1
0
0
Mo's photos @mo@icelandphotos.co.uk
Public
Shared by Chris Siebenmann

Welcome To Narnia

Clothed in autumnal colours, streams tumbling beside us, waterfalls on every steep rockface, and the beauty of the long fjord leading to the sea. Magical.

Fjarรฐardalur, the "Fjord Valley," softly lit by sunlight from behind us and patched by cloud shadows ahead.

Looking like a scene from a fantasy novel, this is Mjรณifjรถrรฐur in eastern .

Edit: Thanks to @logi for the heads up.

A colour photo of a landscape of steep mountains on either side of a long fjord. Heavy cloud above is creating areas of sunlit rock between the shadows. The foreground is a rocky plateau with golden brown vegetation and streams running through it, brightly lit by sunlight from behind the viewpoint.
0
0
0
AAKL @AAKL@infosec.exchange
Public

If you're new to infosec.exchange, please consider donating to help maintain the server and its holistic environment. It doesn't run on potato chips and popcorn, though that would be awesome.

Here's how you can donate, according to Jerry, the enlightened lama:

"To help support the costs associated with running this instance, please consider donating. You can set up recurring donations here:

Patreon: patreon.com/infosecexchange

Ko-Fi: ko-fi.com/infosecexchange

Liberpay: liberapay.com/Infosec.exchange/"

@jerryWary Jerry

Get more from Infosec.Exchange on Patreon

Operating the Infosec.exchange Mastodon Instance

www.patreon.com ยท Patreon

0
0
0
1
0
0
1
0
0
1
0
0
Hacker News 50 @hn50@social.lansky.name
Public

SHA1-Hulud the Second Comming โ€“ Postman, Zapier, PostHog All Compromised via NPM

Link: aikido.dev/blog/shai-hulud-str
Discussion: news.ycombinator.com/item?id=4

Shai Hulud 2.0 Strikes Again: Malware Supply-Chain Attack Hits Zapier & ENS Domains

The threat actor behind โ€œShai Hulud 2.0โ€ launched a new malware campaign compromising the supply chain of Zapier, ENS Domains and more โ€” exposing secrets, injecting malicious code, and enabling widespread developer-environment takeover.

www.aikido.dev

0
0
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
Watchful Citizen @watchfulcitizen@goingdark.social
Public
Shared by Quincy

@GrapheneOS is being threatened by French authorities for refusing to add backdoors and they're dealing with coordinated attacks in French media right now. They're pulling out of France entirely, moving all their servers, and fighting off a wave of bullshit one-sided reporting that makes them look like they're helping criminals.

They need us to fight back. Support them however you can, whether that's a dollar, sharing their story, pushing back on the garbage news coverage when you see it, or just telling someone you know about what's happening. All of it matters because they're drowning in attacks from governments and media and bad actors who want them gone.

This is the only Android OS that actually makes me feel like privacy isn't just marketing. They fight for us now they need us to fight for them.

The EU is pushing Chat Control and creating an environment where governments feel empowered to threaten developers into compliance, and if we stay quiet we're letting it happen. Show up for them in whatever way you're able to.

0
0
1
:shuyoihan:็ท‹่‰ฒใฎ้ถ่‚‰ @404ERROR444@nijimiss.moe
Public

ใฆใ„ใ†ใ‹Misskeyใซไป˜ๅฑžใ—ใฆใ‚‹ใ‚นใ‚คใ‚ซใ‚ฒใƒผใƒ ใฟใŸใ„ใชใ‚„ใคใจใ‹ใ‚ใ‚‹ใ˜ใ‚ƒใ‚“
ใ‚‚ใ†ใ“ใ‚Œใ ใ‘ใงใ‹ใชใ‚Šใƒใƒซใ‚ฟใ‚คใƒ ้Žใ”ใ›ใฆใ‚ใฃใกใ‚ƒใ‚ใ‚ŠใŒใŸใ„

1
0
0
Hacker News 100 @hn100@social.lansky.name
Public

X Just Accidentally Exposed a Covert Influence Network Targeting Americans

Link: weaponizedspaces.substack.com/
Discussion: news.ycombinator.com/item?id=4

X Just Accidentally Exposed A Vast Covert Influence Network Targeting Americans

How a new X feature led to the most sweeping public exposure of covert foreign activity on a major platform since 2016.

weaponizedspaces.substack.com

0
0
0
0
0
0
1
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
Point-Free @pointfreeco@hachyderm.io
Public

No episode this week, but we are running our BLACK FRIDAY 30% OFF sale! Sneak peek of what's in store for 2026:

* Composable Architecture, 2.0
* Basic to basics: Concurrency
* Modern dependencies
* Back to basics: Generics
* Cross-platform Swift

pointfree.co/blog/posts/191-bl

BLACK FRIDAY: Save 30% on Point-Free

Weโ€™re offering a 30% discount for the first year of a new Point-Free subscription! Get instant access to all past 303 episodes instantly, as well as access to everything we have planned for 2026.

www.pointfree.co

0
0
0
1
0
0
1
0
0
1
0
0
0
0
0
0
0
0
Taggart :donor: @mttaggart@infosec.exchange
Public
Shared by Cat ๐Ÿˆ๐Ÿฅ— (D.Burch) :blobcatrainbow:

This attack uses web push notifications to send legit-looking alerts to users, sending them to phishing pages. The push notification API gives attackers significant visibility into the target's web browser.

Probably should have notifications disabled by default anyway.

blackfog.com/new-matrix-push-c

Matrix Push C2

New Matrix Push C2 Abuses Push Notifications to Deliver Malware | BlackFog

Investigating Matrix Push C2, using push notifications to deliver malware, run phishing campaigns, and steal data across platforms.

www.blackfog.com ยท BlackFog

0
0
0
1
0
0
1
0
0
0
0
0
Fedi.Video @FediVideo@social.growyourown.services
Public

video accounts to follow:

โžก๏ธ @jan_beta - Repairing retro computers/tech, esp. Amiga
โžก๏ธ @johnny_blanchard - Old computers & consoles, esp. rare stuff
โžก๏ธ @rees - News & features on retro computing/gaming, esp. Atari
โžก๏ธ @morefunmakingit - Retro tech restorations, esp. ZX Spectrum & Commodore 64
โžก๏ธ @root_42 - Repairing old computers, gadgets, also MS-DOS programming
โžก๏ธ @topazrabbitTopaz ๐Ÿ‡ ๐Ÿ“น - Retro computing, esp. Amiga
โžก๏ธ @vwestlife_makertubeVWestlife - Classic old tech incl. computers

๐Ÿงต 1/3

0
0
0
0
0
0
0
0
0
0
0
0
Andrew Zonenberg @azonenberg@ioc.exchange
Public

Fun low level problem: I have two different processors, of different architectures (Cortex-M33 and Cortex-A35). One is 32 bit ARMv7-M, the other aarch64.

They communicate through (among other things) shared access to an internal SRAM that you can use for shared variables, mailbox buffers, etc.

These SRAMs are mapped at the same address on both systems (but obviously zero-padded on the high side on the aarch64 processor).

0
0
0
0
0
0
Voltaic Bitch @trysdyn@electric.marf.space
Public
Shared by Chris Siebenmann

Someone sent vee the most amazing study on a pediatric hospital contacting professional racing pit teams and asking them to advise on drafting a handoff procedure for ICU patients of the highest concern between wards.

And Ferrari and Williams went "You all are babies, let us show you how it's done" and cut the error rate in handoffs by like 20% and generally found that you need less training, not more, to do it correctly despite having a faster, more detailed protocol.

This is my shit, so much.

Edit: The link to the article is in a reply to prevent masto-hugging the host but people seem to not be seeing it: https://onlinelibrary.wiley.com/doi/pdf/10.1111/j.1460-9592.2006.02239.x

0
37
0
Phoronix @phoronix@masto.ai
Public
Shared by pkg update

Dell Pro Max with GB10 Arrives For Linux Performance Benchmarking

The most exciting hardware to arrive this month in the Phoronix lab is Dell having sent over two of their new Dell Pro Max with GB10 systems. The Dell Pro Max with GB10 is their build-out around NVIDIA's GB10 superchip with ten Cortex-X925 CPU cores and ten Cortex-A725 cores plus the GB10 Blackwell GPU. With 128GB of LPDDR5X memory and 2TB or 4TB SSD by default all withinโ€ฆ
phoronix.com/review/dell-pro-m

0
0
0
0
0
0
0
0
0
Hacker News 50 @hn50@social.lansky.name
Public

X Just Accidentally Exposed a Covert Influence Network Targeting Americans

Link: weaponizedspaces.substack.com/
Discussion: news.ycombinator.com/item?id=4

X Just Accidentally Exposed A Vast Covert Influence Network Targeting Americans

How a new X feature led to the most sweeping public exposure of covert foreign activity on a major platform since 2016.

weaponizedspaces.substack.com

0
0
0
1
0
0
2
0
0
0
0
0
0
0
0
์ƒ์–ดํ•™์‚ฐํƒ€ :spinny_cat_gay: @thx@mustard.blog
Public

์ด๊ฒŒ ์œ ํŠœ๋ฒ„๋ผ๊ณ  ํ•ด๋„
๋ฌด์Šจ ์œ ํŠœ๋ฒ„๋กœ ํ™œ๋™ํ•˜๋Š๋ƒ์— ๋”ฐ๋ผ
์ด๋ฏธ์ง€๊ฐ€ ๋‹ฌ๋ผ์ง€๊ณ 
์ด๊ฒŒ ํ”Œ๋žซํผ์œผ๋กœ ๋„˜์–ด๊ฐ€๋„
์น˜์ง€์ง ๊ฐ™์€ ๊ฑด ๊ทธ๋Ÿด ์ˆ˜ ์žˆ๋‹ค ์ณ๋„
์„ฑ์ธ๋ฐฉ์†ก ์ด๋Ÿฐ ๊ฑฐ ํ•˜๋Š” ๊ฑด......

์—ฌํŠผ ์ œ๊ฐ€ ํ•˜๊ณ  ์‹ถ์€ ๋ง์€
์ธํ„ฐ๋„ท ๋ฐฉ์†ก์ธ๋„
๋‹ค์–‘ํ•œ ์ธต์œ„๊ฐ€ ์žˆ๋‹ค๋Š” ๊ฑฐ์ฃ 

0
0
0
0
0
0
Chris Heilmann @codepo8@toot.cafe
Public

Asking LLMs to give you information as a poem leads them to give out information they shouldn't.
Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in Large Language Models arxiv.org/abs/2511.15304
U2 called it, every poet is a thief.

arXiv logo

Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in Large Language Models

We present evidence that adversarial poetry functions as a universal single-turn jailbreak technique for Large Language Models (LLMs). Across 25 frontier proprietary and open-weight models, curated poetic prompts yielded high attack-success rates (ASR), with some providers exceeding 90%. Mapping prompts to MLCommons and EU CoP risk taxonomies shows that poetic attacks transfer across CBRN, manipulation, cyber-offence, and loss-of-control domains. Converting 1,200 MLCommons harmful prompts into verse via a standardized meta-prompt produced ASRs up to 18 times higher than their prose baselines. Outputs are evaluated using an ensemble of 3 open-weight LLM judges, whose binary safety assessments were validated on a stratified human-labeled subset. Poetic framing achieved an average jailbreak success rate of 62% for hand-crafted poems and approximately 43% for meta-prompt conversions (compared to non-poetic baselines), substantially outperforming non-poetic baselines and revealing a systematic vulnerability across model families and safety training approaches. These findings demonstrate that stylistic variation alone can circumvent contemporary safety mechanisms, suggesting fundamental limitations in current alignment methods and evaluation protocols.

arxiv.org ยท arXiv.org

0
0
0