What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

I work at @freedomofpressFreedom of the Press and I'm told it's some sort of holiday for donating to nonprofits. Some holidays are shams but, as someone very biased, I think Giving Tuesday is totally legitimate and an exception.

My team supports journalists with their digital security needs, including protecting their devices and communicating securely with sources. In 2025, I really do think this matters more than ever. If this is something you care about, support our work. freedom.press/donate

0
1
1
0
0
0

"Through abstraction, we wield an amazing power: it renders workable the general case so we may extend our reach. But, despite how important it is to programming, we programmers rarely think about it critically."

I think I undersold this by just linking to it yesterday. So I'm going to be a bit cheeky and share it again. I'd really like to hear your thoughts on the topic!

Here, I consider the implications for: democracy, diversity, and sustainability.

caolan.uk/notes/2025-12-01_abs

0

anecdotal reports are that this makes Firefox noticeably faster

that list of settings to disable:

browser.ml.enable
browser.ml.chat.enabled
browser.ml.chat.menu
browser.ml.chat.page
browser.ml.chat.page.footerBadge
browser.ml.chat.page.menuBadge
browser.ml.linkPreview.enabled
browser.ml.pageAssist.enabled
browser.tabs.groups.smart.enabled
browser.tabs.groups.smart.userEnabled
extensions.ml.enabled
browser.search.visualSearch.featureGate

    browser.ml.enable
    browser.ml.chat.enabled
    browser.ml.chat.menu
    browser.ml.chat.page
    browser.ml.chat.page.footerBadge
    browser.ml.chat.page.menuBadge
    browser.ml.linkPreview.enabled
    browser.ml.pageAssist.enabled
    browser.tabs.groups.smart.enabled
    browser.tabs.groups.smart.userEnabled
    extensions.ml.enabled
    browser.search.visualSearch.featureGate
0
0
0
0
0
0

FreeBSD 15.0 released with pkgbase

The FreeBSD team has released FreeBSD 15.0, and with it come several major changes, one of which you will surely want to know more about if you're a FreeBSD user. Since this change will eventually drastically change the way you use FreeBSD, we should get right into it.

Up until now, a full, system-wide update for FreeBSD - as in, updating both the base operating s

osnews.com/story/143942/freebs

0
0
0

ES IST SOWEIT!

Dank der Übernahme des Internets durch nicht nachfragende KI ist JETZT der Zeitpunkt, wo wir mit wenig Aufwand den nachfolgenden Generationen verkaufen könnten, dass es Dampfmodems gab, Kuschelblechdosen, Lego aus Holz und ein erstes Internet aus Kühen. Die werden ALLES GLAUBEN!

0
0
0

FreeBSD 15.0 released with pkgbase

The FreeBSD team has released FreeBSD 15.0, and with it come several major changes, one of which you will surely want to know more about if you're a FreeBSD user. Since this change will eventually drastically change the way you use FreeBSD, we should get right into it.

Up until now, a full, system-wide update for FreeBSD - as in, updating both the base operating s

osnews.com/story/143942/freebs

0
0
0
0
0
0
0
0
0

New post: a defense of lock poisoning in .

Followup to recent discussion: decided to write about lock poisoning, looking at the arguments on each side, and informed by our experience at @oxidecomputerOxide Computer Company dealing with the parallel problem of unexpected async cancellations in critical sections.

Please give it a read!

sunshowers.io/posts/on-poisoni

0
0
0
0
0
0
0

my approach to software engineering is like that character from an anime, you know the one, she’s in a lot of anime

you walk into her workshop and it’s full of tools and unfinished projects randomly lying wherever there was free space, and you can tell she lives, works, and sleeps there

she’s sitting on the floor loosely cross-legged, taking apart a strange contraption of some sort, hears you come in and twists around to greet you. she’s wearing a lab coat over a skirt, either a uniform or just a random skirt paired with a random shirt, slightly messy white hair

you tell her what you need fixed and she gets a sparkle in her eyes, says “i’ve never seen one of these before!”, goes and fetches an unsettlingly large wrench (you have no clue what she’ll use it for but you know it’s the only tool she’s going to use today) and shoos you out so she can get to work. you come back a day later, it’s ready for you, and you daren’t ask any questions

0

Saw two of these wee guys on the pavement. The one that was not knocked over said something like "you have been detected and are being observed on cctv, please leave the area".

Seems quite strange to ask folk to leave a public pavement? Maybe I should have tried talking to it?

Crow road Glasgow.

A montage of two portable cctv camera, one knocked over.  on the pavement.
0
0
0
0
0
0
0
0
0
0

With the @openuk Awards coming up, we're excited to spotlight that Rustls — a memory-safe, performance-focused TLS library — is shortlisted in 2 categories!

Joe Birr-Pixton, Creator of Rustls, is also shortlisted for his leadership in secure computing.

Rustls’ continued growth will be supported by the Rust Foundation’s Rust Innovation Lab, which exists to help sustain+scale crucial Rust projects. We're thrilled to champion this remarkable project in its next era.

rustfoundation.org/media/rustl

Graphic announcing that rustls has been shortlisted for two 2025 OpenUK Awards. Text reads “Rustls Has Been Shortlisted For Two 2025 OpenUK Awards!” The OpenUK logo appears at the bottom left, and the rustls mascot — an orange crab wearing a gold chain with a lock — is at the bottom right. Background features a soft orange gradient with subtle gear shapes.
0
0
1
0
0

So I somewhat blindly guessed that the "PCIe" address space block contained a PCIe Base Spec compliant configuration register space starting at base address 0x00.

I'm now printing a bunch of info about the root complex which seems plausible. But I need to figure out how to enumerate the link partner still.

Serial console log showing a bunch of register information and device IDs about the PCIe root complex
0

'계엄 해제 방해' 추경호 구속영장 기각…"혐의·법리 다툼 여지"(종합) 송고2025-12-03 05:13 의총 장소 변경해 의원들 표결 참석 막은 의혹…秋 "무리한 영장" 혐의 부인 특검, 불구속 기소로 수사 마무리 전망…여권, 법원 겨냥한 공세 강화할 듯 www.yna.co.kr/view/AKR2025...

'계엄 해제 방해' 추경호 구속영장 기각…"혐의·법리 ...

0
1

I've seen this article a bunch today, and I'm not at all convinced that the article's analysis of Google's announcement is actually true? Don't get me wrong, there's plenty of reasons to criticize Google and their approach to Android, but I also don't want to fall prey to panic-baiting. Both can be true.

If anyone with infosec experience knows more about what's going on here, I'd absolutely love your insight.

forbes.com/sites/zakdoffman/20

0
0
0

With the @openuk Awards coming up, we're excited to spotlight that Rustls — a memory-safe, performance-focused TLS library — is shortlisted in 2 categories!

Joe Birr-Pixton, Creator of Rustls, is also shortlisted for his leadership in secure computing.

Rustls’ continued growth will be supported by the Rust Foundation’s Rust Innovation Lab, which exists to help sustain+scale crucial Rust projects. We're thrilled to champion this remarkable project in its next era.

rustfoundation.org/media/rustl

Graphic announcing that rustls has been shortlisted for two 2025 OpenUK Awards. Text reads “Rustls Has Been Shortlisted For Two 2025 OpenUK Awards!” The OpenUK logo appears at the bottom left, and the rustls mascot — an orange crab wearing a gold chain with a lock — is at the bottom right. Background features a soft orange gradient with subtle gear shapes.
0
0

#Android is dead and we’d better all leave the ship before it sinks entirely.

Earlier this year #Google already took bold steps in moving the development of several AOSP components behind closed doors, removing the open-source foundations of the project one component at the time.

Options to unlock bootloaders on Android devices are also narrowing down. Xiaomi removed the ability to unlock the bootloader entirely in MIUI in August (after months spent making it ridiculously difficult), same for OnePlus, Samsung did so in July, and probably Google devices will soon follow suit.

And let’s not mention the nightmare of the Play Integrity API that forces all Android developers to register through the Play Store and use Google’s signing keys, even if they don’t intend to distribute their apps through it.

Sure, officially Google has taken a step back and has pledged to provide a way for developers and power-users to bypass those restrictions. But we can all expect it to be a cumbersome and change-prone process filled with ridiculous amounts of frictions at every step - and I wouldn’t even expect such a morally bankrupt company to keep maintaining this “sideloading” option.

Google once competed with Apple for customers. But in a world where Google walks away from the biggest antitrust trial since 1998 with yet another slap on the wrist, competition is dead, and Google is taking notes from Apple about what they can legally get away with. And the EU, the biggest opposer of its anti-competitive acts, is also becoming softer with Big Tech - both because Vestager has left the job, and because being soft with trillion-dollar monopolist tech titans is seen as a sign of being “technologically competitive”.

Your best bet is to purchase a Pixel 9a now, before more manufacturers decide to block bootloaders, and immediately flash it with #GrapheneOS.

The long term plan would instead be to throw all of our efforts and energies on Linux phones. The folks at GrapheneOS are doing an amazing job and fighting against all kind of pressures, but at some point we should probably all just acknowledge that anything that is tainted with Android, or runs on a device intended only to run Android, is a liability, and we should no longer build solutions on top of hardware and software that we can no longer trust.

Sailfish, PostmarketOS, UBPorts, MeeGo or whatever comes next must succeed. No matter the cost.

0

I gave a talk on this recently: "Protocols and Purpose in a Global Democratic Crisis" c-tube.c-base.org/w/f9pF5pwxX8

*None* of the decentralized social networks today are robust enough to handle the threats facing vulnerable people and activists today. Not the present-day fediverse, not Bluesky/ATProto. What can we do?

0
1
0

▪ Lhůta následně vypršela a Trump oznámil uzavření vzdušného prostoru nad jihoamerickou zemí.
ℹ Bílý dům Madura označuje za hlavu kartelu a v regionu útočí na lodě, které podezírá z pašování drog. Při úderech, které prověřuje Kongres USA, zahynulo přes osmdesát lidí.

0