What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

0
0
0
0
0
0
2
0
0
0
0
0
0
0
0
1
0
0
Jan Lehnardt :couchdb: @janl@narrativ.es
Public
Shared by robb

This is very funny because the opposite is true.

I’ve been an open source software vendor for 15+ years and what actually happens when you have a critical vulnerability disclosed to you, you fix it, try and find all other instances of it and put a structural safety net in place that the category of this error can be ruled out for the entire codebase and cannot happen again in future *before* the CVE is made public. Even with tiny volunteer teams.

Citing Log4j here, which was (and is) famously understaffed and underfunded, just tells you how badly resourced react is and they are trying to save their asses and blaming you for not realising that the first fix maybe wasn’t sufficient.

hails.org/@hailey/115703205121

A big highlighted “Note” section on the latest CVE announcement on the react.dev site reading: It’s common for critical CVEs to uncover follow‑up vulnerabilities. When a critical vulnerability is disclosed, researchers scrutinize adjacent code paths looking for variant exploit techniques to test whether the initial mitigation can be bypassed. This pattern shows up across the industry, not just in JavaScript. For example, after Log4Shell, additional CVEs (1, 2) were reported as the community probed the original fix. Additional disclosures can be frustrating, but they are generally a sign of a healthy response cycle.

Hailey (@hailey@hails.org)

Attached: 1 image check out the perception management going on in react’s latest cve disclosure

social.hails.org · hails.org

0
0
0
0
0
0
한국어 뉴스 봇 @newsbot@uri.life
Quiet public
Shared by 나래 :heart_trans:

📰 '뇌에 남은 상처'... 성적 차별, 여성의 건강을 위협할 수 있다

성 불평등이 심한 국가의 여성들은 감정 조절, 회복탄력성, 우울증 및 외상 후 스트레스 장애와 관련된 뇌 영역의 피질이 더 얇은 것으로 나타났다.
bbc.com/korean/articles/c9w772

한 인물이 거울 속 자신을 쳐다보고 있다

'뇌에 남은 상처'... 성적 차별, 여성의 건강을 위협할 수 있다 - BBC News 코리아

성 불평등이 심한 국가의 여성들은 감정 조절, 회복탄력성, 우울증 및 외상 후 스트레스 장애와 관련된 뇌 영역의 피질이 더 얇은 것으로 나타났다.

www.bbc.com · BBC News 코리아

0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
Flaki @flaki@flaki.social
Public

Google has been doing it for years…
straitstimes.com/world/united-

Microsoft has been doing it since forever…
neowin.net/news/microsoft-bans

Amazon is, of course, doing it…
seuros.com/blog/aws-deleted-my

Yet every single time it happens, people are surprised, outraged and—most of all—helpless. It keeps happening because we allow it to happen, over and over again.

US dad takes photos of his naked toddler for the doctor, Google flags him as criminal

The man was caught in an algorithmic net designed to snare people exchanging child sexual abuse material. Read more at straitstimes.com. Read more at straitstimes.com.

www.straitstimes.com · The Straits Times

0
0
0
2
0
0
0
0
0
0
0
0
0
0
0
CBC News @cbcnews@flipboard.com
Public

Health minister says she worries about U.S. public health decisions harming Canadians
cbc.ca/news/politics/marjorie-

Posted into Politics @politics-cbcnewsPolitics

Health minister says she worries about U.S. public health decisions harming Canadians | CBC News

Health Minister Marjorie Michel says she worries about how recent actions by U.S. public health agencies, like removing a universal hepatitis B vaccine recommendation for American infants, could harm Canadians.

www.cbc.ca · CBC

0
0
0
1
0
0
0
0
0
1
0
0
1
0
0
1
0
0
1
0
0
1
0
0
1
0
0
0
0
0
omar @omar@bsd.cafe
Public

what do you think about opencollective.com ?

Is it a good platform (as in no-BS, no-OpenWasher) for FOSS project?

I prefer to donate thru liberapay or SEPA for project when they have the option.

For individuals, I tend to contact them directly.

sustainability

Raise, manage and disburse money with full transparency.

Open Collective is a legal and financial toolbox for groups. It’s a fundraising + legal status + money management platform for your community. What do you want to do?

opencollective.com

0
0
0
0
0
0
1
0
0
0
0
0
Digitale Gesellschaft (DE) @digiges@chaos.social
Public
Shared by Quincy ⁂

Chatkontrolle - schon vorbei?

Weit gefehlt - jetzt steht der Trilog an. @pneutigKonstantin Macher hat für uns mit @RadioCORAX darüber gesprochen wie es beim Thema weiter geht und warum wir jetzt besonders wachsam sein müssen:

radiocorax.de/chatkontrolle-ko

0
0
0
1
0
0
0
0
0
Hacker News 100 @hn100@social.lansky.name
Public

Google Removes Sci-Hub Domains from U.S. Search Results Due to Dated Court Order

Link: torrentfreak.com/google-remove
Discussion: news.ycombinator.com/item?id=4

Google Removes Sci-Hub Domains from U.S. Search Results Due to Dated Court Order * TorrentFreak

Google has removed dozens of Sci-Hub domain names from its search results in the U.S., marking the country's first pirate domain removals.

torrentfreak.com

0
0
0
0
0
0
1
0
0
0
1
0
Francisco Tolmasky @tolmasky@mastodon.social
Public
Shared by Jan Lehnardt :couchdb:

"AI Safety" is so bizarre.

It's as if cigarette companies had themselves sounded the alarm about the dangers of smoking.

And then decided to make their core mission to make smoking safe, insisting on steering public discourse towards the dangers of smoking.

And to drive the point home they started releasing transparent progress reports showing how nothing they try seems to help, wondering out loud whether perhaps these dangers are actually *inherent* to smoking.

And then everyone just shrugs

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
kiq / キク @kiq@fedibird.com
Public
Shared by SparklingOutlaw🍉

“。高速神戸駅から徒歩10分ほど、全くもって飲食店など存在しないエリアの、住宅街の1軒。外観もまんま普通の家である。「株... / “どう見ても普通の民家で中華＆韓国のコース料理！　サウナまで入れる謎空間” (1 user) weekly-osakanichi2.net/archive

どう見ても普通の民家で中華＆韓国のコース料理！　サウナまで入れる謎空間

こんなところに名店が「灯台もと旨し」猫田しげる知らずに暮らしているなんてもったいない！あなたの街の、あんなイイ店、こんなイイ店。「入りづらい」「高そう」「怖そう」？ 大丈夫！グルメライター猫田しげるが、扉を開ける一歩をお手伝いします。この民...

weekly-osakanichi2.net · 週刊大阪日日新聞

0
0
0
0
0
0
0
0
0