What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

We're currently experiencing an impersonation spam wave, and have closed new registrations on pixelfed.social.

If you've been followed, mentioned or messaged by one of them, please report them and opt to send the report to pixelfed.social so we can suspend them!

Boosts appreciated, we're really sorry about this, and are actively working on better mitigations to prevent this type of malicious behaviour.

0
0
0
0
0

그놈의 황금 진짜 좋아하네... "도널드 트럼프 대통령은 지난해 12월 마러라고에서 '황금 함대(Golden Fleet)' 계획을 발표하며 이 신형 전함을 미국 조선업 부흥과 해군 개편의 핵심으로 제시했다. "

RE: https://bsky.app/profile/did:plc:5yjazo67wvtciqpmhiet3atc/post/3mcmgudpguk2x

0
0
0
0
1
0
0
0
0
0
0
0
2
0

I used to think the "used future" aesthetic was cool but a bit silly, like in Star Wars where canonically technology hasn't really advanced in thousands of years, but then I realised that technology hasn't really advanced in about 15 years and it feels suddenly plausible

0
0

Call for the Fediverse knowledge: wife wants to go and watch #auroras (polar lights) on next Winter holidays (aka around Xmas 2026). Either in #Norway, #Sweden or #Finland. If that matters, we have French passports and driving license.

Another activity while there would be hicking; and why not a sled dog session or two. No boat, as much as possible. No outside camping.

No all-inclusive stuff. More like rent a hotel room (or house or whatever fun) and have the opportunity to book activities for the day or not and chill out.

Please comment on experience, thoughts, tips; especially if you live there :)

Please boost so that it may reach the whole Universe for feedback :) If you are a local trip business, I’ll be happy to work with you on this plan.

Thanks peep!

I already know December is not the best moments but we have constraints.

0
0
0

Spent the last couple of days making a bunch of improvements to my website. The sort of stuff that isn't big and flashy, but which makes everything feel a lot more polished.

And I learnt some interesting things along the way which I now want to blog about, so it's a double win!

0
0

A glimpse into what a kernel engineer debugs for enterprise customers.

A bank is running a "security" solution that installs kprobes to intercept, among other things, calls to do_execveat_common(), and monitors all the arguments that could have been passed to execveat(). As do_execveat_common() can be triggered not only by userspace, but also by call_usermodehelper_exec(), a kprobe crafted with poor assumptions may result in an erroneous double dereference of what it thinks points to argv**, causing a General Protection Fault.

The kernel is not dumb however. If a GPF is triggered by a kprobe, it is handled gracefully, and nothing happens, and kprobe just returns a safe value. For a GPF to be triggered however, the CPU has to really try to read the wrong memory address first. The address is pretty random each time, meaning it can point to memory regions that are not mapped by kernel, but have some special meaning for a platform.

Enter the platform. It is configured by the hardware vendor in such a way that if an unaligned access to an MMIO region happens, an MCE is generated. And it is not some MCE for a correctable error, but an MCE indicating process context corruption, in other words, it's fatal. So, once it happens, the system dies with a kernel panic.

And this is exactly what the customer experienced. A socket() syscall caused modprobe to be invoked via call_usermodehelper_exec() → do_execveat_common() chain to load the ipv6 module. This triggered a kprobe that dereferenced wrong memory pointer twice provoking a GPF. The kernel began to gracefully handle the GPF, but the platform saw that the second dereference resulted in accessing the MMIO region, and this was an unaligned access, hence the platform threw MCE. And the system died.

It was fun to investigate this and to explain to the customer that three legitimate things in their system being hit together can trigger a crash.

And of course we joked we should have moved the whole case to the networking team, because it's always IPv6.

0
1
0
2
0
0
0
0

衆院選で勝った暁には、裏金云々を含め、あらゆる悪事をチャラにするんだろうね。

【速報】自民、衆院選で裏金議員の比例重複を容認へ|47NEWS(よんななニュース) 47news.jp/13736249.html

0
1
1
0
0
0
0
0
0

"「興味深いことだが、大統領は本当に悪い食べ物を口にしている」と指摘。具体的にはファストフードや菓子類、炭酸飲料などを挙げた。"

良い子は真似しちゃいけないよ。

ケネディ米保健福祉長官、トランプ氏の「とんでもない」食習慣を暴露 「どうして生きられるのか分からない」 - CNN.co.jp cnn.co.jp/usa/35242850.html

0
1

그놈의 황금 진짜 좋아하네... "도널드 트럼프 대통령은 지난해 12월 마러라고에서 '황금 함대(Golden Fleet)' 계획을 발표하며 이 신형 전함을 미국 조선업 부흥과 해군 개편의 핵심으로 제시했다. "

RE: https://bsky.app/profile/did:plc:5yjazo67wvtciqpmhiet3atc/post/3mcmgudpguk2x

0
0
0

デラ (@derax456) on X
渋谷レコファンの夢CD、ちょっと、セレクションが良すぎやしまいか。手放した方を仮に"夢さん"と呼ぶとすれば、夢さんコンピを編めるほど素晴らしい。店員さんに事情を聞いたら、全部に「夢」と書かれているので、100円以下でしか出せないとのこと。これは、100円CD界の確変と言っても過言ではない。 x.com/i/status/195616313497425
面白すぎるこの事象

0
0
0
0

About Bluesky and federation:
Edit: There might be some mistakes, and my information could be outdated, but the point still stands - Bluesky wasn't built on 100% federation from the start.

I've been wondering about Bluesky's decentralization again. I can't think of any reason why I'd want to self-host Bluesky in its current form. I cannot 100% self host "my own Bluesky".

Their main selling points for building their own protocol were easier migration and better discoverability, but right now there's no simple way to migrate my Bluesky account to my own instance. And hosting the centralized parts yourself isn't really possible, or if it were, not affordable, they haven't made that feasible, by design, it seems.

Even if you self-host a PDS, Bluesky's Relay only indexes up to 10 accounts from it. You can run more, but they won't federate, the central infrastructure decides what gets seen. They control this (source: docs.bsky.app/blog/self-host-f.). You can self-host a PDS (Personal Data Server), but you still depend on Bluesky's centralized Relay and AppView. There's no production-ready alternative infrastructure from what I gather.

It feels like I'd be renting a room in a hotel that someone else is running anyway, when I want my own hotel.

If Mastodon gGmbH vanishes tomorrow, my instance keeps running and federating with everyone else. If Bluesky PBC vanishes, the ecosystem would need to scramble to stand up replacement infrastructure that doesn't really exist yet.

ATProto keeps getting evaluated on its promises while other systems get evaluated on their merits. The "portability" selling point depends on infrastructure that isn't mature enough to actually catch you if Bluesky falls.

I trust W3C, the builders and fathers of the World Wide Web, ActivityPub and the Fediverse.

0
0
0
0
1
0