What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

0
0
0
0
0
0
0
0
0
1
0
0
Sheng @sheng@g0v.social
Public

哪個方面的成就就不得而知 :Danger:

setn.com/m/news.aspx?newsid=17

被歐盟點名人權問題　中國外交部氣噗噗：詆毀！中國人權取得歷史性成就 | 政治 | 三立新聞網 SETN.COM

歐盟駐中國代表團在世界人權日發出聲明，中國的整體人權狀況並未出現實質性的改善，並憂心西藏、新疆、內蒙古及香港的人權，要求釋放超過30位的政治法和人權工作者。但，中國外交部昨（11）日大嗆，惡意詆毀，稱中國走出一條順應時代潮流、適合本國國情的人權發展道路，中國人權事業取得歷史性成就，敦促歐盟反躬自省，客觀看待中國人權事業取得的成就。

www.setn.com · 三立新聞網

0
0
0
1
0
0
0
0
0
Juntai Park @arkjun@hackers.pub
Public
Shared by 킈락

https://nextjs.org/blog/security-update-2025-12-11

Next.js의 추가 보안 업데이트가 있습니다.

지난주에 CVE-2025-66478 보안취약점때문에 부랴부랴 패키지 업데이트한 기억이 있는데, 이번에도 몇개 패치되었네요.

Next.js를 App Router 방식으로 쓰는 개발자분들은 잊지 말고 업데이트하셔요.

fix-react2shell-next 패키지로 검사 및 업데이트 가능합니다.

❯ npx fix-react2shell-next

fix-react2shell-next - Next.js vulnerability scanner

Checking for 4 known vulnerabilities:

  - CVE-2025-66478 (critical): Remote code execution via crafted RSC payload
  - CVE-2025-55184 (high): DoS via malicious HTTP request causing server to hang and consume CPU
  - CVE-2025-55183 (medium): Compiled Server Action source code can be exposed via malicious request
  - CVE-2025-67779 (high): Incomplete fix for CVE-2025-55184 DoS via malicious RSC payload causing infinite loop

...

Next.js Security Update: December 11, 2025

Two additional vulnerabilities have been identified in React Server Components. Users should upgrade to patched versions immediately.

nextjs.org

3
1
0
Mike :nixos: @codemonkeymike@fosstodon.org
Public
Shared by NixOS

Hard to believe this gorgeous 27" iMac, with a 6 core i5-8500, 16 gigs of ram and a solid state drive was on its way to the dump.

Apparently, it's not "good enough" to run the new MacOS, so it was discarded.

Thankfully, is here to save the day and make this a perfect computer for someone that will last YEARS into the future.

27" iMac running the Nixbook installer
0
0
0
1
0
0
1
0
0
0
0
0
0
0
0
Jiajun Xu @foolfitz@social.slat.org
Public

原本第一次搭 Skyliner 很興奮，結果誤點了 20 分鐘，特急都不特急了。

列車來了後，我很怕坐錯車次，問了三次工作人員才敢肯定；結果我的位置坐了一位中國口音的大哥，問他，他只拿車票給我看，座號相同，但肯定是他坐錯車，因為我前面確認好幾次了 😂
還好車裡還有空位，我就另外找位子坐，懶得釐清了。
（後來車掌有來確認座位，但語言不通，也是拿那個人沒輒，車掌回來問我說坐這邊OK嗎？我說OK）

0
0
0
0
0
0
Servo @servo@floss.social
Public

Servo Report for Week 49 2025

Highlights from last week:

- Implemented basic support of custom protocol handlers
- Added webdriver touch support for all platforms
- Finished adding ChaCha20-Poly1305 support to WebCrypto API
- Servo can now use a http proxy without authentication

You can help support Servo, an independent web rendering engine, and the health of the web ecosystem by donating:

github.com/sponsors/servo
opencollective.com/servo

Decorative report cover with the Servo logo that reads "Servo Report Week 49 2025”
0
0
0
2
0
0
0
0
0
Sovereign Tech Agency @sovtechfund@mastodon.social
Public
Shared by Hugo van Kemenade

Last week, we hosted an event to mark the inaugural cohort. It was an opportunity to reflect on the program’s impact, share insights from its evaluation report, and celebrate the vital contributions of these maintainers of critical digital infrastructure.

In our latest blog post, we take you inside the event with a recap of the highlights ➡️ 

sovereign.tech/news/who-will-m

@icingStefan Eissing @hugovkHugo van Kemenade @matkMatthias Klumpp

five people lined up in black "Sovereign Tech Fellowship" Hoodies, in front of a screen
0
0
0
2
0
0
白長谷 @siranagatani@misskey.io
Public

楽天の株主優待、「月30GBのeSIM無料」が1年→6カ月に ただし継続保有で1年へ - CNET Japan
株主優待！
期間短縮化と思いましたが保有していればそのまま継続できるようなので、私にとっては実質的に変わらずで

楽天の株主優待、「月30GBのeSIM無料」が1年→6カ月に　ただし継続保有で1年へ

楽天グループは、第29期株主優待として「楽天モバイル」の音声＋データ30GB／月プランを6カ月間無料で提供する。2025年12月末時点で100株以上を保有する株主が対象となる。また、6月末まで継続保有していれば、無料期間はさらに6カ月延長され、最長1年間利用できる。

japan.cnet.com · CNET Japan

0
0
0
0
0
0
0
0
0
1
0
0
1
0
0
Hacker News 50 @hn50@social.lansky.name
Public

4 billion if statements (2023)

Link: andreasjhkarlsson.github.io//j
Discussion: news.ycombinator.com/item?id=4

4 billion if statements

I recently stumbled upon this screenshot while researching social media on the train. Of course, it was followed by a cascade of spiteful comments, criticizing this fresh programmer’s attempt to solve a classical problem in computer science. The modulus operation.

andreasjhkarlsson.github.io · Blabbin’

0
0
0
1
0
0
1
0
0
0
0
0
0
0
0
디토 @ditto@sapzil.org
Public

내맘대로 올해의 앨범 5개 (기준: 2025년 발매)

北園みなみ - Meridian
長瀬有花 - Mofu Mohu
Ninajirachi - I Love My Computer
蓮ノ空女学院スクールアイドルクラブ - Dream Believers (105期Ver.)
椎乃味醂 - 解釈系

0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
1
0
0
1
0
0
0
0
0
1
0
0
エイポ(味噌汁):real_hato_kokekokko:🍣🎧🔊@:vrchat: @aplm_vtm@misskey.io
Public

虚無

昔むかし(およそ8925年前)、おじいさんとおばあさんと​:takasi:​がいました

おじいさんは山へ芝刈りに おばあさんは川へ洗濯に ​:takasi:​は​:ogoride_sushi:​に行きました

すると ​:takasi:​の行った​:ogoride_sushi:​屋さんのレーンから ​:5000t_kakuteisinkoku:​ ​:5000t_kakuteisinkoku:​と​:harrypottertoniranomisoshiru:​が流れてきました

​:takasi:​は​:fuwa_tententen:​と空を飛び そして 人類で始めて火星に降り立ったのでした

​:you_are_winner:​

​:real_hato_kokekokko:​

1
0
0
1
0
0
0
0
0
0
0
0
0
0
0
1
0
0
1
0
0
0
0
0
dan @danabra.mov@bsky.brid.gy
Public

so there isn’t really a protocol “reader” or a “writer” that isn’t the same thing as RSC itself. unless you introduce some intermediate format or runtime representation which would hurt performance

0
0
0
1
0
0