Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.
This isn’t targeted at anyone in specific - I have had the conversation like 6 times this week,
Americans -
You need a work visa to work in another country, -even remote- unless they allow digital nomad
You can’t just go to most countries on a tourist visa and start looking for a visa sponsor & job
misskey.ioに新しい絵文字 
(sokoni_shibireru__i_akogareruxu__i)が追加されたかも。
RE: https://toot.yosh.is/@yosh/115606322667370792
if your company has gotten to the point where you are paying more than $1000/mo for a wiki (confluence, sharepoint, etc) you should probably hire a librarian
Eins der Standardwohlfühlessen: knusprige Pilze auf cremiger Polenta, dazu Salat und ein bisschen Juicy Marble.
Humming birds are big this year!
What was in the #vegan bowl tonight?
Vegetable Fried Rice with Spicy Marinated Dry-fried Tofu.
#VeganForTheAnimals #ItsEasy2bVegan #VeganFood #Vegan4Life #SvenskaVeganer #KeepDeathOffThePlate #HomeCooking #Vegansk #Vegaani #WorldVeganMonth
Am Ende wird alles wieder Mycel...oder so...und wegen des gestrigen späten Totensonntagskonzerts hat sich der #fungday von sunday auf monday verschoben. Nun aber zum Thema: Der Fruchtkörper zum heutigen #fungday heißt Shiitake. Zusammen mit Topinambur, Aubergine und Paprika ergibt das eine erdige Pilzpfanne, die dank Sojasauce und den Basiszutaten als umami-esk gelten darf.
It’s the kind of cold rainy day where you curl up by the window with a cup of tea and a good book. Hope your boss doesn't notice.
Our most popular series this year is “Modern Persistence”, where we use a SwiftData alternative based on SQLite to build a complex app with:
* Advanced querying
* Full-text search
* Assets
* iCloud sync+sharing
You can now unlock access for a discount!
https://www.pointfree.co/blog/posts/191-black-friday-save-30-on-point-free
ChunChun demonstrating the shape of purrfection
Inspired by perfnow.nl, I've dusted off drafts of my network and device situation analysis. Good news/bad news: devices and networks are improving, but web page payloads are swelling.
The result is predictable: the web is usable for the wealthy, but less so for everyone else. This is an ethical crisis for frontend:
https://infrequently.org/2025/11/performance-inequality-gap-2026/
New, by me: Is your Android TV streaming box part of a botnet?
"On the surface, the Superbox media streaming devices for sale at retailers like BestBuy and Walmart may seem like a steal: They offer unlimited access to more than 2,200 pay-per-view and streaming services like Netflix, ESPN and Hulu, all for a one-time fee of around $400. But security experts warn these TV boxes require intrusive software that forces the user’s network to relay Internet traffic for others, traffic that is often tied to cybercrime activity such as advertising fraud and account takeovers."
The story looks closely at what Superbox is, how it operates, and what it appears to do on the sly. Spoiler: A Censys researcher found that installing the apps that allow these channels to stream enrolls the user's IP in a residential proxy service, and that these devices include powerful network discovery and remote access tools like Tcpdump and Netcat.
Overall, the Superbox is just one brand in an ocean of no-name Android-based TV boxes that are widely available and that either come pre-infected with malware or require malicious apps to use.
https://krebsonsecurity.com/2025/11/is-your-android-tv-streaming-box-part-of-a-botnet/
stop boosting that post, there's no alt text
“Americans are holding onto devices longer than ever and it’s costing the economy”
We need to consume.
The average American now holds onto their smartphone for 29 months, according to a recent survey by Reviews.org, and that cycle is getting longer. The average was around 22 months in 2016.
While squeezing as much life out of your device as p
RE: https://vt.social/@rogueren/115600686997864089
I'd also like to remind everyone that just a couple months back Windows 11 just killed people's SSDs, this wasn't resolved for WEEKS.
#Linux really isn't perfect, but at this point I'd say the things it's not perfect at are far less bad than what Windows isn't perfect at.
I think I'm finally coming around to understanding what librarians actually do, and why people I occasionally see people arguing for hiring librarians at companies.
It's actually really simple: any formally organized group of people produces and consumes a lot of information. The job of a librarian is to organize and maintain that information.
RE: https://fantastic.earth/@abnv/109393393007942049
I missed the anniversary of starting https://fantastic.earth this weekend! Three years and going strong.
We started with #Mastodon, and now we are offering multiple hosted services: https://stic.earth. Ask an existing member for an invite.
This is a really sobering analysis, but I believe it is essentially correct.
おはようございます
こんばんは
🌗 GrapheneOS 因警方恐嚇指控，將伺服器基礎設施遷離法國
➤ 開源隱私專案因國外壓力，被迫遷移伺服器
✤ https://www.privacyguides.org/news/2025/11/22/grapheneos-migrates-server-infrastructure-from-france-amid-police-intimidation-claims/
開源隱私作業系統 GrapheneOS 因面臨法國警方的恐嚇指控，宣佈將其伺服器基礎設施全面遷離法國。該計畫指出，法國已不再是「開源隱私專案」的安全之地。雖然法國用戶仍可繼續使用該系統，但網站和討論伺服器將遷移至國外。此次遷移主要涉及 Mastodon、Discourse 和 Matrix 等服務，將轉移至加拿大多倫多的本地及共享伺服器，而核心網站基礎設施則由德國的 Netcup 公司負責託管。GrapheneOS 強調，其伺服器不收集敏感用戶資料，故遷移不影響簽章驗證和降級保護等服務。開發者們也因對歐盟《聊天控制法案》的支持以及對法國媒體不實
#隱私權 #開源 #GrapheneOS #伺服器遷移 #法國
GrapheneOS migrates server infrastructure from France amid police intimidation claims
The GrapheneOS project has announced on X that they are ceasing all operations in France, asserting that the country is no longer safe for "open source projects"
www.privacyguides.org · Privacy Guides
Link author: 
Privacy Guides@privacyguides@neat.computer
4.5 오푸스 떴다!!!
Microsoft heard you loved the Windows XP Crocs so it made some Xbox ones too 😅 they’re available tomorrow for $80 www.crocs.com/p/xbox-class...
Meet Arisha , a little miracle with a huge soul ❤️🐈#CatsOfMastodon #cats
New, by me: Is your Android TV streaming box part of a botnet?
"On the surface, the Superbox media streaming devices for sale at retailers like BestBuy and Walmart may seem like a steal: They offer unlimited access to more than 2,200 pay-per-view and streaming services like Netflix, ESPN and Hulu, all for a one-time fee of around $400. But security experts warn these TV boxes require intrusive software that forces the user’s network to relay Internet traffic for others, traffic that is often tied to cybercrime activity such as advertising fraud and account takeovers."
The story looks closely at what Superbox is, how it operates, and what it appears to do on the sly. Spoiler: A Censys researcher found that installing the apps that allow these channels to stream enrolls the user's IP in a residential proxy service, and that these devices include powerful network discovery and remote access tools like Tcpdump and Netcat.
Overall, the Superbox is just one brand in an ocean of no-name Android-based TV boxes that are widely available and that either come pre-infected with malware or require malicious apps to use.
https://krebsonsecurity.com/2025/11/is-your-android-tv-streaming-box-part-of-a-botnet/
After a few hours of mixing, editing, rendering and writing subtitles, I've finally published the last of my talks from DebConf25 (
@debian)
"The Security of Debian - An introduction to advanced users - DebConf25 " is a good starting point for those curious about how distributions handle security vulnerabilities and how that's organized outside of the distros.
Pebble Watch software is now 100% open source
Link: https://ericmigi.com/blog/pebble-watch-software-is-now-100percent-open-source
Discussion: https://news.ycombinator.com/item?id=46037626
@catsaladCat 🐈🥗 (D.Burch) 
hope 
@HolosSocial will implement these very necessary quality-of-life features
@ownlife¬ne'er-do-well 🐕
Arch nemesis recommendations are already in the roadmap. We call it 'People you might hate'. Combined with Scheduled Favorites, you'll be able to send them passive-aggressive likes at 3am.@catsaladCat 🐈🥗 (D.Burch)
Tor is upgrading its relay encryption with a new encryption algorithm called Counter Galois Onion (CGO). Upcoming Arti and Tor releases will both support CGO to prevent attackers from tampering with encrypted traffic, adds forward secrecy, and brings Tor's encryption up to modern standards.
https://blog.torproject.org/introducing-cgo/
Introducing Claude Opus 4.5: the best model in the world for coding, agents, and computer use.
Opus 4.5 is a step forward in what AI systems can do, and a preview of larger changes in how work gets done.
ルンバさんにお腹空いたようって文句を言われました。行き倒れたの忘れてた。ごめんよう。
New, by me: Is your Android TV streaming box part of a botnet?
"On the surface, the Superbox media streaming devices for sale at retailers like BestBuy and Walmart may seem like a steal: They offer unlimited access to more than 2,200 pay-per-view and streaming services like Netflix, ESPN and Hulu, all for a one-time fee of around $400. But security experts warn these TV boxes require intrusive software that forces the user’s network to relay Internet traffic for others, traffic that is often tied to cybercrime activity such as advertising fraud and account takeovers."
The story looks closely at what Superbox is, how it operates, and what it appears to do on the sly. Spoiler: A Censys researcher found that installing the apps that allow these channels to stream enrolls the user's IP in a residential proxy service, and that these devices include powerful network discovery and remote access tools like Tcpdump and Netcat.
Overall, the Superbox is just one brand in an ocean of no-name Android-based TV boxes that are widely available and that either come pre-infected with malware or require malicious apps to use.
https://krebsonsecurity.com/2025/11/is-your-android-tv-streaming-box-part-of-a-botnet/
[단독] 인권위, 내란 청산 ‘헌법존중TF’ 구성 않기로 의결했다
www.hani.co.kr/arti/society...
"이들 중 안창호 위원장과 김용원·한석훈·이한별·강정혜 위원은 지난 2월10일 ‘내란 옹호’ 비판이 제기된 ‘윤석열 방어권 안건’에 찬성해 내란 특검에 내란 선동·선전 혐의 등으로 고발된 바 있다. 이들은 “헌법 존중 티에프가 공무원의 인권을 침해한다”고 주장했다고 한다. 이날 김용원 위원은 “헌법존중 티에프를 시행하는 정부를 직권조사해야 한다”고 발언한 것으로 전해졌다."
[단독] 인권위, 내란 청산 ‘헌법존중TF’ 구성 않기...
Re: last boost https://chaos.social/@dpk/115589097803252590
That OCaml PR is textbook open source in the era of vibe coding...
It's got everything:
- PR submitted without the author acknowledging they didn't write it and don't understand it.
- Copyright laundering.
- "I just wanted to get it done!" versus maintainers who know they have to live with code contributions for years.
- Zero-effort pasting LLM output as reply to real people's thoughtful questions. (At least the author acknowledged what they were doing that time.)
- It doesn't matter that it's hard to review because "AI has a very deep understanding of how this code works."
- "Beats me. AI decided to do so and I didn't question it."
If this is our new world then it's going to turbocharge maintainer burnout. 
(If you don't want to read a quite long often depressing thread, would still recommend reading this well reasoned comment by one of the maintainers:
https://github.com/ocaml/ocaml/pull/14369#issuecomment-3556593972 )
@projectgusGus this is why Amaranth has a blanket "no AI" contribution policy: you could argue about its social-scale problems but my view is that it fades in comparison to "if I have to deal with slop being submitted I will simply choose to not take submissions from an open set of people at all"
"no AI PRs" is a compromise, with the other option being "the only way to get your code in is to be from the same guild"
A commonly-misunderstood aspect of computer security is that you are battling computers.
No. That is not right at all. Computers are barely involved.
You are battling humans who eat apathy and coordination problems.
The QWERTY keyboard was designed to reduce mechanical jamming in early typewriters.
We kept it for computers. Which don't jam.
How many of our systems are just preserved solutions to problems that no longer exist?
And how would we even know?
따라하지 마세요
LinkedIn screenshot
was fehlt: eine linkedin funktion um leute zu beleidigen z.b. wie gern hätte ich hier "das hättest du dir auch vorher überlegen können, halt doch einfach dein dummes maul" drunterkommentiert
Am Ende wird alles wieder Mycel...oder so...und wegen des gestrigen späten Totensonntagskonzerts hat sich der #fungday von sunday auf monday verschoben. Nun aber zum Thema: Der Fruchtkörper zum heutigen #fungday heißt Shiitake. Zusammen mit Topinambur, Aubergine und Paprika ergibt das eine erdige Pilzpfanne, die dank Sojasauce und den Basiszutaten als umami-esk gelten darf.
just got an automated email a few minutes ago saying the bunker elevator doors had failed to open. i have never been so thankful theyre rusted shut. i dont know whats down there and now i dont think i want to
It’s not enough that MAGA supporters are realizing that they were conned by Trump, rightwing media, the Republican Party and foreign trolls, but the bigger issue is that X and Musk allowed that con to happen on their platform. They knew about the foreign interference.
https://www.thedailybeast.com/top-maga-influencers-accidentally-unmasked-as-foreign-actors/
The criminal cases against both James Comey and Letitia James are dismissed. A total humiliation for Donald Trump and Pam Bondi. — And it’s only Monday.
Dolmengi
Jeff Atwood
LWN.net
Paul Cantrell
