What is Hackers' Pub?

Windows 11 Notepad flaw let files execute silently via Markdown links

Microsoft has fixed a "remote code execution" vulnerability in Windows 11 Notepad that allowed attackers to execute local or remote programs by tricking users into clicking specially crafted Markdown links, without displaying any Windows security warnings.

www.bleepingcomputer.com · BleepingComputer

青土社 ||ユリイカ：ユリイカ2026年3月号　特集＝眠い

www.seidosha.co.jp

GitHub - 2ndSetAI/good-egg: Trust scoring for GitHub PR authors using graph-based ranking on contribution graphs

Trust scoring for GitHub PR authors using graph-based ranking on contribution graphs - 2ndSetAI/good-egg

github.com · GitHub

HeyWhatsThat Sitemap/FAQ

www.heywhatsthat.com

Apache Arrow is 10 years old 🎉

The Apache Arrow project was officially established and had its first git commit on February 5th 2016, and we are therefore enthusiastic to announce its 10-year anniversary! Looking back over these 10 years, the project has developed in many unforeseen ways and we believe to have delivered on our objective of providing agnostic, efficient, durable standards for the exchange of columnar data. How it started From the start, Arrow has been a joint effort between practitioners of various horizons looking to build common grounds to efficiently exchange columnar data between different libraries and systems. In this blog post, Julien Le Dem recalls how some of the founders of the Apache Parquet project participated in the early days of the Arrow design phase. The idea of Arrow as an in-memory format was meant to address the other half of the interoperability problem, the natural complement to Parquet as a persistent storage format. Apache Arrow 0.1.0 The first Arrow release, numbered 0.1.0, was tagged on October 7th 2016. It already featured the main data types that are still the bread-and-butter of most Arrow datasets, as evidenced in this Flatbuffers declaration: /// ---------------------------------------------------------------------- /// Top-level Type value, enabling extensible type-specific metadata. We can /// add new logical types to Type without breaking backwards compatibility union Type { Null, Int, FloatingPoint, Binary, Utf8, Bool, Decimal, Date, Time, Timestamp, Interval, List, Struct_, Union } The release announcement made the bold claim that "the metadata and physical data representation should be fairly stable as we have spent time finalizing the details". Does that promise hold? The short answer is: yes, almost! But let us analyse that in a bit more detail: the Columnar format, for the most part, has only seen additions of new datatypes since 2016. One single breaking change occurred: Union types cannot have a top-level validity bitmap anymore. the IPC format has seen several minor evolutions of its framing and metadata format; these evolutions are encoded in the MetadataVersion field which ensures that new readers can read data produced by old writers. The single breaking change is related to the same Union validity change mentioned above. First cross-language integration tests Arrow 0.1.0 had two implementations: C++ and Java, with bindings of the former to Python. There were also no integration tests to speak of, that is, no automated assessment that the two implementations were in sync (what could go wrong?). Integration tests had to wait for November 2016 to be designed, and the first automated CI run probably occurred in December of the same year. Its results cannot be fetched anymore, so we can only assume the tests passed successfully. 🙂 From that moment, integration tests have grown to follow additions to the Arrow format, while ensuring that older data can still be read successfully. For example, the integration tests that are routinely checked against multiple implementations of Arrow have data files generated in 2019 by Arrow 0.14.1. No breaking changes... almost As mentioned above, at some point the Union type lost its top-level validity bitmap, breaking compatibility for the workloads that made use of this feature. This change was proposed back in June 2020 and enacted shortly thereafter. It elicited no controversy and doesn't seem to have caused any significant discontent among users, signaling that the feature was probably not widely used (if at all). Since then, there has been precisely zero breaking change in the Arrow Columnar and IPC formats. Apache Arrow 1.0.0 We have been extremely cautious with version numbering and waited until July 2020 before finally switching away from 0.x version numbers. This was signalling to the world that Arrow had reached its "adult phase" of making formal compatibility promises, and that the Arrow formats were ready for wide consumption amongst the data ecosystem. Apache Arrow, today Describing the breadth of the Arrow ecosystem today would take a full-fledged article of its own, or perhaps even multiple Wikipedia pages. Our "powered by" page can give a small taste. As for the Arrow project, we will merely refer you to our official documentation: The various specifications that cater to multiple aspects of sharing Arrow data, such as in-process zero-copy sharing between producers and consumers that know nothing about each other, or executing database queries that efficiently return their results in the Arrow format. The implementation status page that lists the implementations developed officially under the Apache Arrow umbrella (native software libraries for C, C++, C#, Go, Java, JavaScript, Julia, MATLAB, Python, R, Ruby, and Rust). But keep in mind that multiple third-party implementations exist in non-Apache projects, either open source or proprietary. However, that is only a small part of the landscape. The Arrow project hosts several official subprojects, such as ADBC and nanoarrow. A notable success story is Apache DataFusion, which began as an Arrow subproject and later graduated to become an independent top-level project in the Apache Software Foundation, reflecting the maturity and impact of the technology. Beyond these subprojects, many third-party efforts have adopted the Arrow formats for efficient interoperability. GeoArrow is an impressive example of how building on top of existing Arrow formats and implementations can enable groundbreaking efficiency improvements in a very non-trivial problem space. It should also be noted that Arrow, as an in-memory columnar format, is often used hand in hand with Parquet for persistent storage; as a matter of fact, most official Parquet implementations are nowadays being developed within Arrow repositories (C++, Rust, Go). Tomorrow The Apache Arrow community is primarily driven by consensus, and the project does not have a formal roadmap. We will continue to welcome everyone who wishes to participate constructively. While the specifications are stable, they still welcome additions to cater for new use cases, as they have done in the past. The Arrow implementations are actively maintained, gaining new features, bug fixes, and performance improvements. We encourage people to contribute to their implementation of choice, and to engage with us and the community. Now and going forward, a large amount of Arrow-related progress is happening in the broader ecosystem of third-party tools and libraries. It is no longer possible for us to keep track of all the work being done in those areas, but we are proud to see that they are building on the same stable foundations that have been laid 10 years ago.

arrow.apache.org · Apache Arrow

GitHub - 2ndSetAI/good-egg: Trust scoring for GitHub PR authors using graph-based ranking on contribution graphs

Trust scoring for GitHub PR authors using graph-based ranking on contribution graphs - 2ndSetAI/good-egg

github.com · GitHub

V pražské zoo se potvrdila ptačí chřipka

U uhynulých ptáků v pražské zoologické zahradě byla potvrzena ptačí chřipka, informovala ve čtvrtek Státní veterinární správa. Inspektoři zjistili výskyt nákazy poté, co zoo nahlásila postupný úhyn několika ptáků v některých expozicích. Veterináři ve spolupráci se zoologickou zahradou přijmou mimořádná veterinární opatření s cílem zabránit šíření nákazy.

ct24.ceskatelevize.cz

Launch: Interact with Unbridged Replies & Mentions

Last year, we launched a feature for Bridgy Fed that sent a DM of an hourly digest of interactions that we couldn't bridge back to your native platform. While that gave you visibility into interactions you normally wouldn't have, you still had to have an account in the other ecosystem

blog.anew.social · A New Social

Death Pong Demo on Playtester

You step into a place where no one plays for fun. A metal collar tightens around your neck, audience whispers, and every throw can end in victory… or voltage. Here, there are no draws — only winners or dead bodies.

playtester.io · Playtester

Launch: Interact with Unbridged Replies & Mentions

Last year, we launched a feature for Bridgy Fed that sent a DM of an hourly digest of interactions that we couldn't bridge back to your native platform. While that gave you visibility into interactions you normally wouldn't have, you still had to have an account in the other ecosystem

blog.anew.social · A New Social

Why is ICE seizing people’s phones and documents? • Minnesota Reformer

After the federal agents took the shackles off Gust Johnson’s ankles to release him from detainment, he asked for his phone back. That would be staying at the Bishop Henry Whipple Federal Building, the agent told him, as part of their investigation into him assaulting a federal agent. “I didn’t assault an officer. I got […]

minnesotareformer.com · Minnesota Reformer

Ada & Zangemann - A Tale of Software, Skateboards, and Raspberry Ice Cream - FSFE

Here you find additional information and resources about the book "Ada & Zangemann - A Tale of Software, Skateboards, and Raspberry Ice Cream" by Matthias ...

fsfe.org · FSFE - Free Software Foundation Europe

Mind-Altering Parasite May Make Infected People More Attractive, Study Suggests

The brain-hijacking parasite Toxoplasma gondii seems to be almost everywhere.

www.sciencealert.com · ScienceAlert