What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

mhoye @mhoye@mastodon.social
Public
Shared by Chris Siebenmann

Increasingly angry so many people are happy to say "well what did you expect, is anyone surprised by this, why don't you have backup plans, it's your own fault," whenever a corporate IT system wrecks somebody's life for clicking the wrong button. It's sanctimonious victim blaming and it's one hundred percent bullshit, a symptom of a deeply immature industry getting permission to fuck up from an army of deeply immature people.

Reflexively shilling for corporate negligence should humiliate you.

0
0
0
0
0
0
evacide @evacide@hachyderm.io
Public

If you are outside of Minnesota and you are looking for ways to help right now, here is a guide:

naomikritzer.com/2026/01/21/ho

A couple of people in penguin costumes are next to a bike loaded down with papier-mache letters and signs saying "Don't Obey in Advance!" and "Put ICE on ice!"

How To Help if You are Outside Minnesota

Last edited January 22, 2026 I’m going to assume that if you’re reading this, you more or less understand the situation in Minnesota and I don’t have to explain it to you! That sa…

naomikritzer.com · Will Tell Stories For Food

0
0
0
0
0
0
0
0
0
Frontend Dogma @frontenddogma@mas.to
Public
Shared by Mike Gifford, CPWA @FOSDEM

Accessibility, by @bogdanlazar.com and @mgiffordMike Gifford, CPWA @FOSDEM (@httparchive.org):

almanac.httparchive.org/en/202

Accessibility | 2025 | The Web Almanac by HTTP Archive

Accessibility chapter of the 2025 Web Almanac covering ease of reading, navigation, forms, media, ARIA, and accessibility apps.

almanac.httparchive.org

0
0
0
1
0
0
1
0
0
0
0
0
0
0
0
Rairii :win3_progman: :win3: @Rairii@labyrinth.zone
Public

lol, another plaintext file is what looks like the src for the firmware signer for this TPM, with three ECC private keys hardcoded (two are commented out)

there's also the code for the firmware flasher on the device side, and binary for the util that talks to that code, with identical hardcoded key+iv for crypting the buffer transferred over uart (it's china, so as you'd expect the algorithm is SM4-CFB)
0
0
0
0
0
0
Rairii :win3_progman: :win3: @Rairii@labyrinth.zone
Public

oh this is interesting

a while ago ransomhouse leaked data from some chinese microcontroller company, and it seems nobody really noticed

this company also makes TPMs

a lot of the data looks crypted, but there’s some plaintext in there

including listing files (which for C code seems to be preprocessor debug-output, with single character prefix denoting what the preprocessor did, comments and preprocessor directives and preprocessor output are ALL included) for the firmware of a production TPM implementation

the anti-glitch stuff in particular seems like the usual fare for such, but if you haven’t seen such before then it looks kind of weird:

enum
{
    Cpy_OK = 0x55a55aa5,
    SetData_OK = 0x7CCF62F2,
    XOR_OK = 0x6A17D34A,
    RandomSort_OK = 0x51261DC5,
    CheckOrder_OK = 0x54830C23,
    Reverse_OK = 0x43C94C71,

    IsZero_YES = 0x7a7a7a7a,
    IsZero_NOT = 0x07070707,
    IsOne_YES = 0x6a6a6a6a,
    IsOne_NOT = 0x06060606,
    Cmp_EQUAL = 0x4a4a4a4a,
    Cmp_LESS = (int32_t)0x95959595,
    Cmp_GREATER = 0x6c6c6c6c,

    Cmp_ERROR = 0x00044400,
    SetData_ERROR = 0x00055500,
    CheckOrder_ERROR = 0x00066600,
    IsZero_ERROR = 0x00077700,
    Cpy_ERROR = 0x00088800,
    Reverse_ERROR = 0x00099900,
    XOR_ERROR = 0x000aaa00,
    RandomSort_ERROR = 0x000bbb00,
};
​#define TPM_ATTACK()                                                                \
    {                                                                               \
        tpm_set_shutdown_mode();                                                    \
        return TPM_RC_FAILURE;                                                      \
    }
​#define xor_sum3(a, b, c)                           ((UINT32)(a) ^ (UINT32)(b) ^ (UINT32)(c))

before preprocessor:

    // Load the persistent data
    UINT32 infoAddr = 0;
    ret = Cpy_U32_sum((UINT32*)&go, (UINT32*)NV_GO_START, sizeof(go) >> 2,
        xor_sum3(&go, NV_GO_START, sizeof(go) >> 2));
    if (ret != Cpy_OK) {
        TPM_ATTACK();
    }

after preprocessor:

    // Load the persistent data
    UINT32 infoAddr = 0;
    ret = Cpy_U32_sum((UINT32*)&go, (UINT32*)((((0x6C800 + ((0x5) << 9)) + ((0x2) << 9)) + (0x00000200)) + (0x00000200)), sizeof(go) >> 2,
        ((UINT32)(&go) ^ (UINT32)(((((0x6C800 + ((0x5) << 9)) + ((0x2) << 9)) + (0x00000200)) + (0x00000200))) ^ (UINT32)(sizeof(go) >> 2)));
    if (ret != Cpy_OK) {
        { tpm_set_shutdown_mode(); return (TPM_RC)((TPM_RC)(0x100)+0x001); };
    }
Rairii :win3_progman: :win3: @Rairii@labyrinth.zone
Public
Shared by ✧✦Catherine✦✧

lol, another plaintext file is what looks like the src for the firmware signer for this TPM, with three ECC private keys hardcoded (two are commented out)

there's also the code for the firmware flasher on the device side, and binary for the util that talks to that code, with identical hardcoded key+iv for crypting the buffer transferred over uart (it's china, so as you'd expect the algorithm is SM4-CFB)
0
1
0
0
0
0
Kees van der Leun @Sustainable2050@mastodon.energy
Public
Shared by Stefan Bohacek

The Dutch petition to boycott the FIFA World Cup in the US has really taken off: Over 145,000 people signed it already!
actie.degoedezaak.org/petition

Boycot het Trump-WK in de VS

Nu deelnemen aan een sportevenement alsof er niets aan de hand is, legitimeert Trumps expansieve politiek. Laat ons land en onze voetballers aan de goede kant van de geschiedenis staan. Hou onze jongens thuis. Deze campagne is gestart nav een column in Vrij Nederland, zie de link hieronder.

actie.degoedezaak.org · DeGoedeZaak

0
0
0
Chris Siebenmann @cks@mastodon.social
Public

How am I out of AAA alkaline batteries? Well, fortunately I have a ton of left-over rechargeable AAAs¹ so I guess it's time to throw some into my also left over very nice charger and get them topped up, just in case.

¹ I used to have AAA powered bicycle lights, back before everything went LiIon and became much better. Well, technically I still have the bike lights, I just don't use them any more.

0
0
0
𒁹𒀭𒌍𒋾𒀀𒅆 @unninni@daepi.so
Public
날씨가 추울 때 따뜻한 동네를 가면 어떨까? 라는 고민에 몇번 시도한 적이 있다.
도쿄도 3성급 비지니스는 겨울 밤 추웠고
홍콩도 12월 기습한파(영상8도)에 이불 여러겹에 패딩까지 꺼내 감고 잤다.
이제 규슈남단, 오키나와 열도, 대만, 동남아를 시도해봐야지 하는데
0
0
0
0
0
0
kazuhito @kazuhito@vivaldi.net
Public

"ウィリアムズさんには、旋回して空母と方向を合わせることができない。そこで空母の艦長は異例の措置を決断。空母の方で向きを変え、ウィリアムズさんの進入方向に合わせることにした。"

すげえことやってたな……

冷戦時代のリアル「トップガン」、30分でソ連のミグ4機撃墜も戦闘の事実を50年口外せず(2/3) - CNN.co.jp cnn.co.jp/usa/35243127-2.html

冷戦時代のリアル「トップガン」、30分でソ連のミグ4機撃墜も戦闘の事実を50年口外せず

ロイス・ウィリアムズさんは、まさに実在する「トップガン」だった。トム・クルーズが生まれる10年前のことだ。 - (2/3)

www.cnn.co.jp · CNN.co.jp

0
0
0
0
0
0
1
0
0
1
0
0
0
0
0
wakest ⁂ @liaizon@social.wake.st
Public
Shared by 洪 民憙 (Hong Minhee) :nonbinary:

On February 3rd (very soon!) I am hosting another [BERLIN FEDERATED NETWORK EXPLORATION CIRCLE] at @offline. It's a chance to meet and talk with people who are interested in the & networking & exploration & circ---you get the idea.

We have the pleasure of having @hongminhee洪 民憙 (Hong Minhee) :nonbinary: who will give a presentation about @fedifyFedify: ActivityPub server framework "an opinionated framework for TypeScript that handles the protocol plumbing"

It is an open free event and everyone is welcome!

BERLIN FEDERATED NETWORK EXPLORATION CIRCLE BEFENEC? BEFENEEXCI? we have 洪 民憙 (Hong Minhee) all the way here from Korea with a presentation about Fedify, a fediverse library they have been building that is now powering the federation of things like Ghost and Hackers' Pub come join us offline at offline Lichtenrader Str. 49 Berlin
0
0
2
백화선생 @hybrideconomics.bsky.social@bsky.brid.gy
Public

그리고 그걸 보고 트럼프는 미네소타(미니애폴리스가 있는 주)의 민주당 주지사가 천억 달러 이상의 돈을 횡령, 불법 이민자들에게 뿌린 것을 은폐(Cover up) 하기 위한 것이라고 주장 중. 전두환도 5월 광주에 이런 소리는 안 했다.

RE: https://bsky.app/profile/did:plc:a6qvfkbrohedqy3dt6k5mdv6/post/3md74y4lihc24

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
kazuhito @kazuhito@vivaldi.net
Public

サラダ屋は少ない、あってもお洒落すぎて値段高い

サラダ屋さんめちゃ増えてきたけど温かいお野菜をお腹いっぱい1人で食べられる店がなさすぎないか (2ページ目) - Togetter togetter.com/li/2655544?page=2

サラダ屋さんめちゃ増えてきたけど温かいお野菜をお腹いっぱい1人で食べられる店がなさすぎないか (2ページ目) - Togetter

サラダ屋さんめちゃ増えてきたけど温かいお野菜をお腹いっぱい1人で食べられる店がなさすぎないか (2ページ目)

サラダ屋さんめちゃ増えてきたけど温かいお野菜をお腹いっぱい1人で食べられる店がなさすぎないか？？？ わかる わかりみ！ 願望の4割はこれ 生野菜だと量が食べれないから蒸し野菜の店、増えて〜 わかるぅ🐻 温野菜うまい。 サラダ屋さんって冷たいものかぬるいものがほとんどですよね…ミネストローネやロールキャベツ、シチューとかあってもいいと思います。

togetter.com · Togetter [トゥギャッター]

0
0
0
0
1
0
kazuhito @kazuhito@vivaldi.net
Public

"今のWindowsは、もはやユーザーのための｢道具｣ではなく、｢Microsoftが利益のためにユーザーを監視するサービス｣に変わってしまった。そんな印象を抱き、別れを決意しているように見えました。"

今、密かに起きている｢Windows離れ｣。“思ったより快適な移住先”とは？ | ギズモード・ジャパン gizmodo.jp/2026/01/some_window

今、密かに起きている｢Windows離れ｣。“思ったより快適な移住先”とは？

最近、PCを使っていて｢これ、本当に自分の持ち物なのかな？｣と感じることはありませんか？勝手に始まるアップデート、頼んでもいないのに表示される広告と強制されるAI機能。ネット上では今、こうしたWindows 11の振る舞いに｢もう付き合ってられない｣と見切りをつけ、Linuxへ乗り換える人がちらほら出てきています。Linuxは、世界中の開発者が協力して作っている｢自由にカスタマイズできるパソコン

www.gizmodo.jp

0
0
0
0
0
0
0
0
0
kazuhito @kazuhito@vivaldi.net
Public

"人権団体は、実際の死者数は当局発表よりもはるかに多く、最大で2万人に達する可能性もあると指摘。イランでは2週間前からインターネットが遮断されているため、正確な数字の確認は困難だと付け加えている。"

イラン政権の存続許せば世界中の暴君にメッセージ「十分な数の人々を殺せば権力維持できる」 ゼレンスキー氏　写真12枚　国際ニュース：AFPBB News afpbb.com/articles/-/3619320?p

イラン政権の存続許せば世界中の暴君にメッセージ「十分な数の人々を殺せば権力維持できる」 ゼレンスキー氏

【1月24日 AFP】ウクライナのウォロディミル・ゼレンスキー大統領がスイス東部ダボスで開催された世界経済フォーラム年次総会（ダボス会議）で、イラン反政府デモに対する致命的な弾圧は、当局が「十分な数の人々を殺せば権力を維持できる」と示すことになると発言したことを受け、イランのアッバス・アラグチ外相は23日、ゼレンスキー氏を激しく非難した

www.afpbb.com

0
0
0
wakest ⁂ @liaizon@social.wake.st
Public
Shared by @reiver ⊼ (Charles) :batman:

On February 3rd (very soon!) I am hosting another [BERLIN FEDERATED NETWORK EXPLORATION CIRCLE] at @offline. It's a chance to meet and talk with people who are interested in the & networking & exploration & circ---you get the idea.

We have the pleasure of having @hongminhee洪 民憙 (Hong Minhee) :nonbinary: who will give a presentation about @fedifyFedify: ActivityPub server framework "an opinionated framework for TypeScript that handles the protocol plumbing"

It is an open free event and everyone is welcome!

BERLIN FEDERATED NETWORK EXPLORATION CIRCLE BEFENEC? BEFENEEXCI? we have 洪 民憙 (Hong Minhee) all the way here from Korea with a presentation about Fedify, a fediverse library they have been building that is now powering the federation of things like Ghost and Hackers' Pub come join us offline at offline Lichtenrader Str. 49 Berlin
0
0
2
원고지 @wongoji.bsky.social@bsky.brid.gy
Public
Shared by 초무

그러고보면 한인 아나키 중에서는 이야 이 사람 진짜 머리 좋았나보다.. 싶은 것을 넘어서 이론적으로는 당연한데 진짜로 그렇게 한다고? 싶은 사람들이 있는디요 그 중 한 명은 이회영이 아니었을까 싶음 예를 들면 '일제에게 들킬 수 있으므로 대화는 필담으로 하고 그 내용은 모조리 머릿속에 기억한다'라는 건 타당은 하죠 근데 사람이 대화가 간단한 거면 몰라 그게 아닌데 그걸 토씨하나 틀리지 않고 다 기억할 수 있겠나 싶단 말입니다 그런데 이회영은 그걸 합니다 그래서 아나키 치고는 장수하신..

0
0
0
1
0
0
0
0
0
kazuhito @kazuhito@vivaldi.net
Public

言うてもう50過ぎてるからな自分は。よーし禁酒するか、とはなりにくい

アルコール摂取は「適量」でも健康に有害　近年の研究が示唆 | Forbes JAPAN 公式サイト（フォーブス ジャパン） forbesjapan.com/articles/detai

アルコール摂取は「適量」でも健康に有害　近年の研究が示唆 | Forbes JAPAN 公式サイト（フォーブス ジャパン）

これまで、アルコールは適度に摂取すれば健康に有益だと認識されてきた。だが、アルコールが健康に及ぼす影響に関する科学的知見は、特にここ数年で大きく進化している。近年、アルコールは人体に重大な害をもたらす可能性があり、飲酒量にかかわらず完全にリ...

forbesjapan.com

0
0
0
0
0
0
Vee @VeroniqueB99@mastodon.social
Public

"I think the majority of Americans (including left-wing voters) have not fully grasped the fact that our standing in the world will not recover in our lifetimes.
Even if we elected two full-term Democrats in a row, it wouldn't change the perception of the rest of the world. Because the rest of the world has discovered we do not have a system that prevents our nation from pivoting 180º toward authoritarianism when a madman is elected."

- Tony Rush

0
0
0
kazuhito @kazuhito@vivaldi.net
Public

ホワイトハウスは今や大統領の拡声器でしかない無能

米ホワイトハウス、英首相の批判を一蹴「トランプ大統領は絶対に正しい」　写真2枚　国際ニュース：AFPBB News afpbb.com/articles/-/3619294

米ホワイトハウス、英首相の批判を一蹴「トランプ大統領は絶対に正しい」

【1月24日 AFP】米ホワイトハウスは23日、ドナルド・トランプ米大統領が2001年9月11日の米同時多発攻撃を受けて始まったアフガニスタン紛争で北大西洋条約機構（NATO）同盟諸国の部隊が最前線を避けたと主張したことに対する英国のキア・スターマー首相の批判を一蹴した。

www.afpbb.com

0
0
0
1
0
0
wakest ⁂ @liaizon@social.wake.st
Public
Shared by Danny Garside

On February 3rd (very soon!) I am hosting another [BERLIN FEDERATED NETWORK EXPLORATION CIRCLE] at @offline. It's a chance to meet and talk with people who are interested in the & networking & exploration & circ---you get the idea.

We have the pleasure of having @hongminhee洪 民憙 (Hong Minhee) :nonbinary: who will give a presentation about @fedifyFedify: ActivityPub server framework "an opinionated framework for TypeScript that handles the protocol plumbing"

It is an open free event and everyone is welcome!

BERLIN FEDERATED NETWORK EXPLORATION CIRCLE BEFENEC? BEFENEEXCI? we have 洪 民憙 (Hong Minhee) all the way here from Korea with a presentation about Fedify, a fediverse library they have been building that is now powering the federation of things like Ghost and Hackers' Pub come join us offline at offline Lichtenrader Str. 49 Berlin
0
0
2
0
0
0
Cassidy James :gg: :fh: @cassidy@blaede.family
Public
Shared by Em :official_verified:

Friendly reminder that Signal—while maybe not perfect—is a much better choice for communication than RCS, especially if you are communicating anything sensitive. Doubly true if you are on iOS or communicating with anyone who is, as Apple still does not even use end-to-end encryption for RCS like Google does on Android.

signal.org/download/

Download Signal

Download Signal for Android, iOS, Linux, macOS, and Windows.

signal.org · Signal Messenger

0
0
0
0
0
0
0
0
1
0
0
1