What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
Lesbian Death Bed @bitterkarella@sfba.social
Public

14
Niven: okay but mr president
Niven: surely you need us to advise you on your next step
Niven: for example, a lot of Venezuelans were probably injured and maimed in those indiscriminate bombings
Niven: what if we spread a rumor about organ traffikers to keep them out of hospitals?
Niven: eh? eh?
Niven: that one never goes out of style!

0
0
0
Marijke Luttekes @mahryekuh@hachyderm.io
Public

I cannot stress how much of a joy it is to have Justfile commands with the same names in all my projects (or in `git exclude` for other people’s projects).

The way I can do just “run”, “build”, “upgrade”, “test”, “bump [project version]”, no matter the underlying framework reduces cognitive overhead and context switching.

10/10 would recommend.

0
0
0
0
0
0
0
0
0
0
2
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
0
Kazuky Akayashi ฅ^•ﻌ•^ฅ @KazukyAkayashi@social.zarchbox.fr
Public

​:nko_curious:​

Jan 04 21:54:41 debian mitra[4006]: 2026-01-04T21:54:41 mitra_activitypub::deliverer [WARN] failed to deliver activity to https://mitra.social/users/silverpill/inbox: error sending request for url (https://mitra.social/use>
Jan 04 21:54:41 debian mitra[4006]: 2026-01-04T21:54:41 mitra_activitypub::queues [INFO] delivery job: 10.03s, 3 delivered, 1 errors, 0 skipped (attempt #2)
Jan 04 21:54:41 debian mitra[4006]: 2026-01-04T21:54:41 mitra_activitypub::queues [INFO] delivery job re-queued
Jan 04 21:55:19 debian mitra[4006]: 2026-01-04T21:55:19 mitra_api::http [WARN] POST /api/v1/apps : Origin is not allowed to make this request
Jan 04 21:55:21 debian mitra[4006]: 2026-01-04T21:55:21 mitra_api::http [WARN] POST /api/v1/apps : Origin is not allowed to make this request



RE: citron.zarchbox.fr/objects/019b89fa-7024-f129-feb7-2d8db81525ad

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
Mark Wyner Won’t Comply :vm: @markwyner@mas.to
Public
Shared by Em :official_verified:

RE: dair-community.social/@emilymb

Men. Do better.

It sucks when someone feels like they want to abandon a community because of waves of ignorance. We all lose when that happens.

It’s okay to make mistakes IF your intentions are genuine and kind. And if it happens you apologize, learn, and move on.

0
0
0
0
0
0
0
0
0
0
0
0
Em :official_verified: @Em0nM4stodon@infosec.exchange
Quiet public

“It’s common for those who don’t experience inequality to ignore or deny its prevalence. What we need is more engagement, observation, listening – and ultimately allyship, from men in tech,”

0
0
0
0
0
0
Della @oyeDella@owo.cafe
Quiet public
Shared by Em :official_verified:

@Em0nM4stodonEm :official_verified: A friend of mine studied for a technology degree a few years ago, and it was awful the things that men said about women in public places, like in class chat. These were young people, in a generally progressive country! She felt terrible there and told me that some women might have left because of that derogatory atmosphere. :blobCatAngry

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

RFC 9421 HTTP signatures in 2026

Robey Pointer @robey@socialhub.activitypub.rocks

Now that RFC 9421 has been published and is no longer a draft, I think it would be a good idea to write a FEP (or other document) with implementation recommendations, to ensure interoperability between AP servers. The RFC describes how to create and verify signatures, but it’s still up to us to define things like the required fields to be signed, which algorithms are likely to work, and how to discover servers that support it.

I believe HTTP signatures are still useful even with FEP-8b32 object signing, because they prove the authenticity of the origin server. That can be used to implement federation policies on private networks (not connected to the wider “fediverse”), or as a basis of trust before even parsing the AP object body. FEP-8b32 proofs validate the activity object itself and remain with the object as it traverses the network; HTTP signatures validate each link at the transport layer.

Also, I think it’s fine & good for the popular servers (mastodon, misskey, gotosocial, …) to wait for smaller servers to shake out interoperability first. It’s easier for the small servers to iterate and debug. Once we have something working, the more popular servers can implement our consensus requirements with a higher confidence it will “just work”.

Silverpill, in a separate thread, pointed me to a list of tootik’s HTTP signature requirements (here: https://github.com/dimkr/tootik/blob/d6fecfefd80a445b27f589250bb19ebcd95acee2/FEDERATION.md#http-signatures) and I think they make a good starting point, so I’ll kick off discussion with a lightly modified version:

  • require ed25519, recommend rsa-v1_5_sha256 also
  • required signed fields: @method, @target-uri
    • if a query is present, require: @query
    • for POST, also require: content-type, content-digest
  • advertise support using FEP-844e on the server actor
  • signatures must use public keys from FEP-521a (“assertionMethod”)
  • signatures must have a “recent” (one hour?) “created=” time, since this is a transport signature
  • signatures may use the server actor key if a FEP-8b32 object proof is present

I’ve implemented a first draft of this in squidcity, and I’m excited to try it out with other small servers to see what works.

Read more →
0
0
0
0
0
0
0
0
0
1
0
0
1
0
0
Horologram @horologram.bsky.social@bsky.brid.gy
Public

국가 사이를 완전히 서로 불간섭으로 지낼수 있는 샌드박스로 분리해두면 괜찮겠지만 현실은 그럴수가 없는것 ㅠㅠ 사실 이건 국가 이전에 사람 조직에게도 그렇고... 그냥 다 같이 섞여사는 진흙탕이라서 문제... (뭔가 먼미래에 행성간 이주가 가능하면 분리가 가능할지도 모르겠지만) 현실은 본의아니게 다 엉겨서 사는 지옥의 조별과제를 하는 ...

0
0
0
Mark Wyner Won’t Comply :vm: @markwyner@mas.to
Public

RE: dair-community.social/@emilymb

Men. Do better.

It sucks when someone feels like they want to abandon a community because of waves of ignorance. We all lose when that happens.

It’s okay to make mistakes IF your intentions are genuine and kind. And if it happens you apologize, learn, and move on.

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Helen @hlseward@mstdn.social
Public

Following the recent heated discussion re: Marmite, I saw this today. I'd seen pictures, but look, it really exists and half price no less. I wonder why that might be. Reader: I did not buy it. I wouldn't even know what to do with it. They suggest over ice cream, or churros. Or popcorn or savoury veg?? But, even as a superfan, I couldn't bring myself to buy. I might regret that: I doubt they're making more...

Plastic squeezy containers of "Caramel Sauce with Marmite" on M&S shelves advertised with a red sticker as half price. £1.50 instead of the original £3. Next to some classic, elixir of life, Marmite.
0
0
0
0
0
0