What is Hackers' Pub?

お知らせ📣
「ねがいぼしのエトワール」がぬいぐるみになりました！
コンプセットは500円引き、先着30名様には描き下ろしサイン入りポストカード付き！
ぜひお迎えしていただけると嬉しいです🌟（グッズ単体もあります）

販売期間【12月17日〜1月13日】
ご購入はこちら⬇️
https://lastrologie.stores.jp

もうね...キレちまったよ!!!!!!!!!!!!!!!!!!​​​​​​

Favorite Photo: Living Waters by sjohnstoncpa https://flic.kr/p/2rLQjpe

Favorite Photo: 🇮🇹 Manarola | Cinque Terre by dawvonism https://flic.kr/p/2rLWzzm

Favorite Photo: Valloire, l'aiguille noire by Patrice Dardoize https://flic.kr/p/2rM5GM2

Favorite Photo: Kirjufell Iceland by EtienneR68 https://flic.kr/p/2rMahYw

飯食う気力ないけどがんばって食うか​​

毎日線香が燃え尽きる時間を計測してるんですが（？）、今日は燃えるのが遅いね

why does this look like square enix is selling HRT

2025 is winding down! 🎇

So much happened this year. Our team is very proud to look back on all the achievements, collaborations and projects that made their way onto our calendar.

We have so many people to thank! And so many cool things to remember. Check out the thread for a peek 📜

학교서 성추행 당한 제자 돕다가 해임…교사 지혜복의 ‘복직 투쟁’ 피해 학생도, 폭로 교사도 보호받지 못한 2년7개월 수정 2025-12-16 16:42 www.hani.co.kr/arti/society...

학교서 성추행 당한 제자 돕다가 해임…교사 지혜복의 ‘...

awkは真面目にやりたい

冬こそ白黒。雪景色は白黒大判フィルムでキメろ​​

서로 존중하고 배려하는 마음으로 성장하는 것이 가장 중요합니다.

libuvといえばPythonにもuvloopというものがありまして・・・

社のアドベントカレンダーの原稿をとりあえず書いた
月曜日公開予定です

免許取得して3回くらいしか運転してません​​

俺もSCSKみたいにPL/1の新会社作るか

Good morning Fedi friends!

Feeling a little emotional today as I reflect back on one year of #selfhosting.

This toot from December 17 2024 shows off my excitement over signing up for my first VPS and installing #YunoHost: https://mastodon.social/@_elena/113667636910565210

If you check out the full thread you can see some of the challenges I faced in the early days. It's only been a year but it feels like a lifetime ago. When I read back, I think: who was this person? _ (task) is so easy! Like, why be scared of tweaking DNS records? 😅​

I will write about the highs and lows in a proper blog post. Spoiler alert: there were mostly HIGHS ☺️​

For now, I want to express my gratitude to:

✨​ @shollyethanEthan Sholly who encouraged me by saying (I'm paraphrasing) "go for it, you learn by doing things"

✨​ @iljailja who recommended I check out YunoHost (I had never heard of it before)

✨ ​@yunohost@toot.aquilenet.fr for empowering me to self-host so many great FOSS tools... and upgrading and maintaining them in a super easy way

✨ @stereoralf tauscher for helping me test my first self-hosted app (this #GoToSocial account)

And thank you to all the sysadmins and programmers who have helped me troubleshoot problems this year. I found that tech support on the Fediverse takes less than a minute 🥰​​

I'm really #GratefulForYou 💖​

#MySoCalledSudoLife

Interesting 👀 https://social.zarchbox.fr/notes/agclhhyre66bnqz3

Extension from @kagihq : https://translate.kagi.com/extension

The extension adds/replaces a Translate button on @phanpy (and other fediverse servers/apps too including @elk)

どうも、優良ドライバーです✌️​​✌️

高鳥都 (@somichi) on X
シネマカリテを運営する武蔵野興業の河野義勝社長にインタビューしました。新宿駅すぐそばのミニシアターは、なぜ13年での閉館が決まったのか……公表以来マスコミ取材は断ってきたそうで、現代ビジネスが初の媒体となりました。映画ファンのみなさん、どうぞご一読ください。 https://t.co/xM6PKxdkRL https://x.com/i/status/2000951816062906676

서재방 옷장에서 자고 있길래 그냥 뒀더니 한참 뒤에 ‘왜 나 안 찾아?!‘ 하듯이 히융 히융 냐앙 울면서 방에서 나와서 온 식구가 웃었다. 푹 자라고 그냥 뒀지.

再上映って今週だったのか……残念、行けない。

『バック・トゥ・ザ・フューチャー』公開40周年限定上映が決定！タイムトラベルSFの最高傑作が史上初のIMAX®そしてプレミアムフォーマットでは4DXでスクリーンに蘇る！ | 東宝東和株式会社 オフィシャルサイト https://tohotowa.co.jp/news/2025/10/bttf40_1

ねむい

休憩なしで働ける時間じゃない、8時間

個人の範囲でPythonでやってるようなことはShellスクリプトでなんとかなるのでそれ使ってまう

ガンガンフィルム買ってバシバシ撮るとたのしい。ガーッハッハ

uvがそもそも何かあんまわかってない

Python環境は何も考えずにDocker使ってる

​​​​

石井ゆかりの星占い「2026年上半期、星はどう動く？」 - cocoloni占い館 Sun https://honkaku-uranai.jp/article/12896/

🎙️ We also got to take part in the @oredevØredev conference this November! Catch Alex’ talk on #LocalFirst UX: https://www.youtube.com/watch?v=bulFRAPgQw4

🙌 We continued writing about our @sovtechfundSovereign Tech Agency partnership! You can now learn about the contributions we made to @log4jApache Log4j — https://neighbourhood.ie/blog/2025/08/05/nh-sta-s01e05-log4j
and #systemd — https://neighbourhood.ie/blog/2025/07/23/nh-stf-s01e04-systemd?pk_campaign=mastodon&pk_kwd=eoy

🍿 We even launched our own YouTube channel! We shared new and archival deep-dives and tutorials, and can’t wait to do more in 2025! Are you subscribed? https://www.youtube.com/channel/UCkWSKN-pYhvX5uBUBpYjkgA/

十の位が1の間になんとかしごおわした……

googleアカウント作るのに電話番号必須になってる？

自分が使い倒しているのに影響されてか ついにバンドメンバーもメイ層スタンプを使いだした

無金利ローン通ってほしくないのに通ってしまうと買わざるを得ないので無金利ローンって良くないよね…
馬鹿なので4つ抱えています

유선 인터넷 + LTE failover 마저도 터지는 사례가 발견되어

LTE failover를 2중으로 걸어둠.

Succès pour #Ariane6 !
La mission #VA266 a placé avec précision les satellites #Galileo SAT 33 & SAT 34 en orbite. 🛰🛰

https://cnes.fr/communiques/succes-4e-mission-commerciale-dariane-6-satellites-galileo-sat-33-sat-34-orbite

OpenSSH runs a large number of tests via Github Runners, both Github supplied ones on a public repo, and on selfhosted runners on a private repo. The latter covers a bunch of platforms Github doesn't support, and is private not because we don't want it accessible (in fact we would prefer it be public) but because as far as we can tell, making it public would represent a significant security risk.

Github have announced that they will begin charging per-minute fees for Github Actions self-hosted runners starting next year. These fees apply only to runners on private repos, but "actions will remain free in public repositories."[0] This is going to be a significant problem for us.

Github's own documentation points out allowing selfhosted runners on public repositories is unsafe, because it's a potential remote code execution vector via running arbitrary workflows in modified pull requests:

"As a result, self-hosted runners should almost never be used for public repositories on GitHub, because any user can open pull requests against the repository and compromise the environment."[2]

There are some controls[1], but the documentation on them doesn't exactly instill confidence (emphasis on the weasel words added):

"Anyone can fork a public repository, and then submit a pull request that proposes changes to the repository's GitHub Actions workflows. [...] To *help* prevent this, workflows on pull requests to public repositories from *some* outside contributors will not run automatically, and *might* need to be approved first. Depending on the "Approval for running fork pull request workflows from contributors" setting, workflows on pull requests to public repositories will not run automatically and *may* need approval if: The pull request is created by a user that requires approvals based on the selected policy.[or] The pull request event is triggered by a user that requires approvals based on the selected policy."

All of this uncertainty could be addressed by completely disabling pull requests on a repo, but while that has been requested many many times over the course of a decade([3] [4]), this is still not possible.

It *is* possble to *temporarily* disable pull requests on a repository via Interaction Limits[5], but using this as a security control that (silently?) fails open after some amount of time is problematic to say the least. The required functionality is almost there, it just needs a "forever" option.

So, in summary: self-hosted runners remain free as long as you run them on public repos, which you shouldn't because it's unsafe, unless you also disable pull requests, which you probably can't.

[0] https://resources.github.com/actions/2026-pricing-changes-for-github-actions/
[1] https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#controlling-changes-from-forks-to-workflows-in-public-repositories
[2] https://docs.github.com/en/actions/reference/security/secure-use
[3] https://github.com/orgs/community/discussions/8907
[4] https://github.com/dear-github/dear-github/issues/84
[5] https://docs.github.com/en/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository

はぁさむ

Pythonインストールって言われた瞬間にuvかdockerを考える

3Dプリンターですら山寨機が登場しているのが機体に違わぬ中国らしさ。品質がそこまででもない機械を送り出して訴訟に巻き込まれたりしないんだろうか。うまい免責条項を仕込むような専門家が存在する？
- シェア9割越え。家庭用3Dプリンター市場を中国勢が制した理由 | レバテックラボ（レバテックLAB） https://levtech.jp/media/article/column/detail_770/