Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.
If you self host anything, double check your servers, there was a CVE in react/nextjs that opened full server compromise to random attackers. many servers were hit and installed crypto miners or malware to be a part of a botnet
@ruby0x1ruby0x1 
@mcc Especially if you are running umami analytics. Seems like a lot of people do
They have released 3.0.2 and 2.20.0; earlier versions are affected
スイッチングハブが落ちてるなら一カ所で飲めばいいじゃない #なにいってんだこいつ
In the Fediverse track at SFSCon, Jaz-Michael King spoke about:
Hiraeth and Hashtags: Building a Bilingual Community on the Fediverse
@peter 
@cstrossCharlie Stross I feel like every kid these days deserves at least a Sofirn SP10Pro flashlight, and when they're responsible enough to not blow out their night vision or start a lithium fire they can graduate from an AA cell to a LiIon 14500 cell (which about triples or quadruples its output).
@gnomonBen Zanin @peter @cstrossCharlie Stross Oh my god, flashlights have firmware now. Can’t wait until I have to reboot my flashlight.
Here's someone absolutely killing it on a piano / keyboard rendition of the NES Ducktales Moon Theme https://www.youtube.com/watch?v=09G25bxf1Bk
How is that keyboard even still standing during this performance? How are their hands still attached to their arms
RE: https://social.growyourown.services/@FediTips/115685483678590908
I originally wrote this article for government agencies, but resharing it in the context of the quoted post, in case someone finds it helpful for sharing with their organizations.
Particularly the case studies and a list of scheduling tools might be relevant.
https://stefanbohacek.com/blog/fediverse-an-overview-for-government-agencies/
VLC stands for Very Large Cone
A New Way to Watch Your Linux System Work https://lobste.rs/s/uaswiw #linux
https://www.both.org/?p=12706
Jepsen: NATS 2.12.1
Link: https://jepsen.io/analyses/nats-2.12.1
Discussion: https://news.ycombinator.com/item?id=46196105
disease transmission, US-specific :boost_request:
Katelyn Jetelina reports that "influenza-like illnesses" (with symptoms of coughs, fevers, and sore throats) have reached seasonal epidemic levels in the US: "This is when I start masking in crowded indoor spaces like airports. Yes, well-fitted masks work. This is a physics question with a clear answer. And I’ll take all the protection I can get—I’d love to not miss upcoming school performances, work travel, and some fun family events."
(https://yourlocalepidemiologist.substack.com/p/fall-vaccination-rates-are-down-flu)
If you're not already masking in crowded indoor spaces, now is the time to get your N95/KN95s back out. You may be confident your immune system can handle whatever comes your way, but it's not fair to assume that is true of everyone you share space with.
さて起きねばだよ
You can now delegate tasks to Claude Code directly from Slack.
Simply tag Claude in a channel or thread. Coding tasks will automatically be routed to Claude Code and start up a new session on the web.
がっつり10時間寝た
Quantum sensors can detect magnetic fields more accurately than other sensors, so the European Space Agency is sending them to outer space to measure Earth’s magnetic field. They will be used to improve global navigation and climate change tracking. https://spectrum.ieee.org/quantum-sensors-space?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Mastodon-Daily-Pipeline
git clone待ちにMastodonを…すぐ終わったな…
そういや、マウスでパソコン操作したこと無いって結構多いんだよな
スクリーンをタップするのが普通になってしまっている
マウスの使い方がわからないという、想定していなかった自体が結構起きている
Typo of the day: Permissin
#TypoOfTheDay
What's going on with Syncthing for Android?
It seems like the project suddenly disappeared and the maintainer has set his profile on github to privat.
However, it seems like another github account has taken over the project. There has been no communication why the project has been handed over. This is worrying, since the new account has access to the signing keys of the app and at least theoretically it could be possible to add malicious code to this widely used app.
I would like to keep thinking that Syncthing is still trustworthy, but to be honest, as long as we don't know what's going on, I'm not sure.
No more O'Reilly subscriptions for me
Link: https://zerokspot.com/weblog/2025/12/05/no-more-oreilly-subscriptions-for-me/
Discussion: https://news.ycombinator.com/item?id=46194063
New blog post:
Finding a miscompilation in Rust/LLVM
Turns out sometimes it *is* a compiler bug.
https://emmatyping.dev/finding-a-miscompilation-in-rustllvm.html
If you self host anything, double check your servers, there was a CVE in react/nextjs that opened full server compromise to random attackers. many servers were hit and installed crypto miners or malware to be a part of a botnet
If you self host anything, double check your servers, there was a CVE in react/nextjs that opened full server compromise to random attackers. many servers were hit and installed crypto miners or malware to be a part of a botnet
Disagreements over post-quantum encryption for TLS https://lobste.rs/s/2lglm4 #cryptography
https://lwn.net/SubscriberLink/1048978/8efe916082e53bfe/
Age-verification mandates create barriers along lines of race, disability, gender identity, sexual orientation, immigration status, and socioeconomic class. Here’s 10 (not so) hidden ways how. https://www.eff.org/deeplinks/2025/12/10-not-so-hidden-dangers-age-verification
@effElectronic Frontier Foundation Lawmakers who draft/enact Age Verification and similar policies insist that said policies are about "child safety." But anyone with even rudimentary critical thinking skills knows that is not true
The true purposes of these policies are as follows:
-Make organizing protests virtually impossible
-Erase marginalized groups from the internet
-Make accessing vital resources much harder, if not impossible
-Erase anything that dilutes the state's ability to brainwash the populace (Palestine, Environmentalism, LGBTQ+ rights, Voting Rights, Reproductive Rights, Immigration, etc.).
-To "return" sexuality and expression in general back to their "proper" place in society and make adult art, sex work, etc. more precarious, more exploitable, and with less recourse to any law or institution
-General petty spite towards people who don't treat lawmakers like deities
Overall, de-anonymization won't make kids safe and it won't result in a more polite internet (just look at Facebook and LinkedIn).
Anyone who advocates for these policies shouldn't complain when their ID/Credit Card/Biometric data is inevitably leaked to the dark web and they have to deal with ID theft and such for years/decades.
They also shouldn't complain when they can't access a vital service and/or get jailed because either 1: The government didn't approve of what they said or 2: The extremely error prone AI that scans their messages thought the innocuous pic of their kids/pets was CSAM/Bestiality.
#Privacy #DigitalRights #FreeSpeech #Censorship #Internet #SocialMedia #US #UnitedStates #EU #Canada #Australia
If you self host anything, double check your servers, there was a CVE in react/nextjs that opened full server compromise to random attackers. many servers were hit and installed crypto miners or malware to be a part of a botnet
Is ActivityPub a blatant violation of GDPR?
Age-verification mandates create barriers along lines of race, disability, gender identity, sexual orientation, immigration status, and socioeconomic class. Here’s 10 (not so) hidden ways how. https://www.eff.org/deeplinks/2025/12/10-not-so-hidden-dangers-age-verification
Somebody: “Emm, why nix? Did you know that using nix is against trans-rights?”
Me: “Ah, mate, kill me now. Another idiot. If nix was a closed source product for an evil corp, sure, I get it. But, it's a fricking open-source software, by using it i'm not submitting to anybody's ideology, religion, or politics. It's a piece of code, Free for everybody to use, modify and redistribute. Jaysus.
Same person, pays money to Amazon, uses X and drives a Tesla. Also, a giant fan of Musk. 🤦
Am Dienstag wird in #Freiburg erneut gegen die ausgrenzende #Bezahlkarte protestiert. Und zwar vor dem Regierungspräsidium, das die Stadt 
@freiburgStadt Freiburg gegen ihren Willen massiv unter Druck setzt, die Karte für alle Geflüchtete schnell einzuführen. Vorher gehts im Gemeinderat um den aktuellen Stand der Dinge. Freitags zwischen 16 Uhr und 18 Uhr gibt es im Kyosk (Adlerstr.) die Chance sich solidarisch mit den betroffenen am Gutscheintausch zu beteiligen. Auf unserer Webseite findet ihr unter dem Stichwort Bezahlkarte zahlreiche Beiträge. https://rdl.de/tag/bezahlkarte
monday, monday #photography #art #mastoart #fediart #photomonday #fotomontag #moodymonday #reflection #rain #city #street
Deep dive on Nvidia circular funding
Link: https://philippeoger.com/pages/deep-dive-into-nvidias-virtuous-cycle
Discussion: https://news.ycombinator.com/item?id=46196076
It's really awkward the person you have to sue is the government for censoring your software through Apple and not Apple for creating a situation where the government can censor your software. Apple is more powerful, and less accountable, than a government. https://infosec.exchange/@josephcox/115684595581297105
🎉 New episode of Changelog News!
Why AI needs hard rules (not vibe checks), what Anthropic's acquisition of Bun's creators tells us about the AI takeover, Jonah Glover couldn't get Claude to recreate Space Jam's 1996 website, Google finally unkills something, and Bazzite is a distro for the next generation of Linux gaming.
unstable dot systems update: turns out that puma wasn’t starting as many worker processes as it was supposed to, so now that I’ve fixed that, we may be more responsive immediately following interactions from large accounts on large servers
Really wish Mastodon web-interface filters had booleans, for so many reasons, but today's thing I wish I could accomplish but cannot: "Hide posts by [REDACTED] that are boosts of other people mentioning [REDACTED]."
A series of tricks and techniques I learned doing tiny GLSL demos
Link: https://blog.pkh.me/p/48-a-series-of-tricks-and-techniques-i-learned-doing-tiny-glsl-demos.html
Discussion: https://news.ycombinator.com/item?id=46194477
"(똥 될 확률 높음)"이라니, 제미나이야, 너 어디서 그런 말 배웠니... 🤣😭😇
ich möchte Teil einer Erwachsenenbewegung sein
It's really awkward the person you have to sue is the government for censoring your software through Apple and not Apple for creating a situation where the government can censor your software. Apple is more powerful, and less accountable, than a government. https://infosec.exchange/@josephcox/115684595581297105
@reiver ⊼ (Charles) 
Chris Siebenmann
Glyph
C106落選 
Hugo van Kemenade
Kat Marchán 🐈
Em 
Andreas Freise
leyrer
