What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

Inversion Sunrise, Scottish Highlands (2024).

The recent cold snaps in the UK have made me think back to some excellent mornings a couple years ago in the Highlands where I explored a rewilding glen in inversion conditions. The glowing light and sub zero temperatures in the birch lined valley made for stunning photographic opportunities.

two frosty birch trees stand tall in the foreground of a young woodland, framing a mountain scottish highlands which rises up through the middle of the frame in the background. there are atmospheric clouds and sunrise pierces through the clouds. the top half of the mountain is bathed in pink glowing light.
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

I was wondering when a reporter would uncover this.

So BitLocker is super secure, right? Well... BitLocker recovery keys are backed up to Microsoft's Cloud - and they give them out to law enforcement on request. Using the BitLocker recovery key, you can just unlock the device without a PIN etc.
forbes.com/sites/thomasbrewste

0
0
1

@julian @silverpill @slyborg the issues I have marked for the next version are here.

github.com/w3c/activitypub/iss

I know there are some on there that Silverpill won't like, such as supporting IRIs for object IDs. I think it's worth having that conversation.

0
0
0
0
0
0
0
0
0
0
1
1

Ported some in-request HTML munging from beautifulsoup (+ lxml) to selectolax (lexbor), and saved over 150ms!

Maybe beautifulsoup has had its day... Even JustHTML was about on-par with bs4 + lxml, and that's pure Python.

github.com/rushter/selectolax

0
0

God bless our brave neighbors in Minnesota.

If Anyone Can Pull Off a General Strike, It’s Minnesotans

The massive outpouring of support for Friday’s day of action against ICE builds on long-term organizing that residents of the North Star State have tended to for a long time.

newrepublic.com/article/205318

0
0

facebook.com/share/p/1DaRqLriV

(《おわびとおしらせ》
大雪の被害にあわれたみなさまにお見舞い申し上げます。22日付の日刊紙は、記録的大雪のため一部の地域で新聞輸送を断念しました。読者のみなさまにおわび申し上げます。22日付の紙面PDFを掲載いたします。


jcp.or.jp/akahata/』

頑張れ!赤旗

0
0
1

is getting its first formal update path since 2018. I wrote about why this matters, how this leads to some strange and funny power dynamics, and about who actually participate

connectedplaces.online/reports

0
0
1

RE: mastodon.social/@fediverserepo

It does feel like has been frozen in amber, maybe this will help. I'm hoping developers get involved or its very hard to see how things will change.

Especially the Live Online Account Portability stuff which just has from the get go.

0
0
0
0

While working on , I noticed something about how handles object access. When a remote server requests a followers-only post or DM with a valid HTTP Signatures (draft-cavage) from an authorized actor, Misskey still returns 404 instead of the content. It seems Misskey only checks the visibility field (public/home) without verifying the signature at all.

takes a different approach—when is enabled, it validates the HTTP Signatures and returns the content if the requesting actor has permission. I think it would be beneficial if Misskey could adopt a similar mechanism, since it would better respect the access control semantics that ActivityPub intends. Has anyone else run into this, or are there specific reasons Misskey handles it this way?

0
0

@lcamtuflcamtuf :verified: :verified: :verified: Nice, and I found your updated illustrations in the radio article too.

I find I go back and forth on the "paper" background of the illustration.[1] It is nice to have a delineation of the figure area but the fill sometimes gives me the feeling of a different paper taped inside a notebook.

[1] Here is a 'corner' on my display where the paper effect background is shown:

What appears to be a corner of a piece of paper on white background.
0

While working on , I noticed something about how handles object access. When a remote server requests a followers-only post or DM with a valid HTTP Signatures (draft-cavage) from an authorized actor, Misskey still returns 404 instead of the content. It seems Misskey only checks the visibility field (public/home) without verifying the signature at all.

takes a different approach—when is enabled, it validates the HTTP Signatures and returns the content if the requesting actor has permission. I think it would be beneficial if Misskey could adopt a similar mechanism, since it would better respect the access control semantics that ActivityPub intends. Has anyone else run into this, or are there specific reasons Misskey handles it this way?

0

While working on , I noticed something about how handles object access. When a remote server requests a followers-only post or DM with a valid HTTP Signatures (draft-cavage) from an authorized actor, Misskey still returns 404 instead of the content. It seems Misskey only checks the visibility field (public/home) without verifying the signature at all.

takes a different approach—when is enabled, it validates the HTTP Signatures and returns the content if the requesting actor has permission. I think it would be beneficial if Misskey could adopt a similar mechanism, since it would better respect the access control semantics that ActivityPub intends. Has anyone else run into this, or are there specific reasons Misskey handles it this way?

0
0