What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

0

How do we Grow the Open Social Web? Good question! But lots of people have good ideas, and many of them are coming to our online un-workshop on this, March 2.

Some of them are already listed on our event page, with the ideas they submitted.

Sounds interesting? Join us! https://fediforum.org/2026-03-growing-open-social-web/#papers

0
0

:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:​​:misskey_loading:

0

I recently discovered I could right-click copy/paste Vivaldi browser Tab Stacks as raw text URLs into any app! 🤯

@Vivaldi Now I have a feature request:
Allow users to paste lists of text URLs from any app into Vivaldi as new Tab Stacks. I was surprised when I was unable to do this already...

Currently it seems like you can only paste Tab Stacks from Vivaldi windows (not text lists). help.vivaldi.com/desktop/tabs/

0
0
0
0
0
0
0
0
0
1

I keep seeing stories about LLMs finding vulnerabilities. Finding vulnerabilities was never the hard part, the hard part is coordinating the disclosure

It looks like LLMs can find vulnerabilities at an alarming pace. Humans aren't great at this sort of thing, it's hard to wade through huge codebases, but there are people who have a talent for vulnerability hunting.

This sort of reminds me of the early days of fuzzing. I remember fuzzing libraries and just giving up because they found too many things to actually handle. Eventually things got better and fuzzing became a lot harder. This will probably happen here too, but it will take years.

What about this coordinating thing?

When you find a security vulnerability, you don't open a bug and move on. You're expected to handle it differently. Even before you report it, you need at a minimum a good reproducer and explanation of the problem. It's also polite to write a patch. These steps are difficult, maybe LLMs can help, we shall see.

Then you contact a project, every project will have a slightly different way they like to have security vulnerabilities reported. You present your evidence and see what happens. It's very common for some discussion to ensue and patch ideas to evolve. This can take days or even weeks. Per vulnerability.

So when you hear about some service finding hundreds of vulnerabilities with their super new AI security tool, that's impressive, but the actually impressive part is if they are coordinating the findings. Because the tool probably took an hour or two but the coordination is going to take 10 to 100 times that much time.

0
0
2
1
2
1
1
1

I keep seeing stories about LLMs finding vulnerabilities. Finding vulnerabilities was never the hard part, the hard part is coordinating the disclosure

It looks like LLMs can find vulnerabilities at an alarming pace. Humans aren't great at this sort of thing, it's hard to wade through huge codebases, but there are people who have a talent for vulnerability hunting.

This sort of reminds me of the early days of fuzzing. I remember fuzzing libraries and just giving up because they found too many things to actually handle. Eventually things got better and fuzzing became a lot harder. This will probably happen here too, but it will take years.

What about this coordinating thing?

When you find a security vulnerability, you don't open a bug and move on. You're expected to handle it differently. Even before you report it, you need at a minimum a good reproducer and explanation of the problem. It's also polite to write a patch. These steps are difficult, maybe LLMs can help, we shall see.

Then you contact a project, every project will have a slightly different way they like to have security vulnerabilities reported. You present your evidence and see what happens. It's very common for some discussion to ensue and patch ideas to evolve. This can take days or even weeks. Per vulnerability.

So when you hear about some service finding hundreds of vulnerabilities with their super new AI security tool, that's impressive, but the actually impressive part is if they are coordinating the findings. Because the tool probably took an hour or two but the coordination is going to take 10 to 100 times that much time.

0
0
1
0
1
0
1
1
0
0

RE: social.bund.de/@Bundesregierun

Angebliche Fusionskraftwerke
Angeblich nicht finanzierbarer Sozialstaat
Angeblich hocheffiziente Verbrenner
Angeblich unzumutbare Besteuerung von Überreichen
Angeblich komplexe Völkerrechtsverstöße durch die USA
Angeblich zu faule Arbeitnehmer
Angebliche Ausnutzung telefonischer Krankmeldungen
Angebliche Bürgergeldeinsparungen in Milliardenhöhe

Augen auf bei Desinformation!

0
0
0
0
0
1
1
0
0
1

“초코바 15개를 시켰더니 덤으로 택배 상자 15개가 딸려 왔다. 배송 쓰레기는 폭증하지만, 이를 막기 위한 제도는 멈춰 섰다. 2022년 개정된 수송 포장재 기준(포장공간비율 50% 이하)이 업계 반발로 2년간 유예된 데 이어, 시행을 코앞에 두고 또다시 계도기간을 부여하며 사실상 무력화됐기 때문이다.”

유럽에선 착한 기업들, 한국에선 ‘일회용 폭군’이 되는...

0
0
1
0

Ve složkách týkajících se zesnulého sexuálního delikventa Jeffreyho Epsteina byla začerněna jména nejméně šesti osob, které nebyly mezi oběťmi, naznačil podle CNN republikánský kongresman Thomas Massie spolu s demokratickým kongresmanem Ro Khannou.

0

This is very interesting and it's great this kind of research is being done!

hbr.org/2026/02/ai-doesnt-redu

This is one development organization. So I wonder how much culture plays into it. If you have a grind mindset, maybe focused more on competition than collaboration, using AI could feed into this.

I already read a lot of stuff about keeping multiple agents running at all times, juggling between them. While I'm sure there are useful applications of this, I suspect a grind culture plays into this that makes people want to show off how busy they are.

@grimalkinaCat Hicks has written a lot about the cultural aspects of software dev, which is influencing me to ask questions like that.

0

RE: mastodon.online/@bartgroothuis

Zákon EU o čipech přináší výsledky. Dnes se v IMEC v Lovani píše nová kapitola historie technologie polovodičů. ASML a 🇳🇱 🇪🇺 🇧🇪 investují 2,5 miliardy eur do vývoje technologie budoucnosti. Vysoký výkon v Nizozemsku!

0
0
0
1
0
1

RE: mastodon.social/@shimon1024/11

"AFAIK, Mastodon is the first global social networking service that displays Mongolian script posts vertically" github.com/mastodon/mastodon/i

Quoting this post for testing, and screenshot for reference.

A Mastodon post showing a post by shimon1024@mastodon.social with a Traditional Mongolian content, vertically laid out.
0
0
1
0
0
0