What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

1
0
0
0
0
0
0
0
0
0
0
0
tante @tante@tldr.nettime.org
Public

Basically: If you run OpenClaw connected to any meaningful system you are not fit to design, program or run any kind of software. That disregard for security and quality should leave a black mark on you for many years.

0
6
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
tante @tante@tldr.nettime.org
Public

RE: flipboard.com/@404media/404-me

This is a great illustration about the state of the art in "AI": People with access to inconceivable resources running massively expensive, dangerous code on anyone's data (sometimes even their own) with no regards for basic security or quality standards and practices.

The discipline of software engineering has never been great at establishing and following those kinds of practices but "AI" has thrown us back decades. And we'll suffer the drop in software quality and security for a long time.

0
0
1
0
0
0
0
3
0
0
0
0
0
0
0
MediaFaro Magazine @mf_magazine@mastodon.mediafaro.org
Public
Shared by Dr. Anna Latour

On this day in 1582, Pope Gregory XIII announces the Gregorian calendar, now the world’s most widely used calendar.

On this day in 1918, Estonia declares independence from Russia.

On this day in 1920, the Nazi Party (NSDAP) is founded in the Hofbräuhaus beer hall in Munich, Germany.

On this day in 2020, Russia launches a full-scale invasion of Ukraine, six years after the annexation of Crimea.

MediaFaro: On This Day in Europe
0
0
0
Renaud Chaput @renchap@oisaur.com
Public
Shared by Dr. Anna Latour

RE: mastodon.social/@MastodonEngin

We are looking at growing the Mastodon team with two new backend developers. We are starting some ambitious projects and need help!

You need to have a significant experience with Ruby on Rails as this is our framework of choice, but we are also looking for experience in search algorithms, protocol specifications, Rust or Go and project management (this one to assist me in tracking everything we are working on).

If you are interested, please apply using the form provided in the job description.

0
5
1
0
0
0
0
0
0
0
0
0
1
0
0
Berlin Werbefrei @berlinwerbefrei@bewegung.social
Public

Der neue Park-Turm vor dem Wohnhaus von Sylvia Weiss in Berlin-Spandau soll eigentlich zum Umweltschutz beitragen und das Stadtbild aufwerten.
Der Betreiber wirbt mit dem innovativen Design und dem Einsatz nachhaltiger Technologien.

Stattdessen strahlen drei riesige Monitore von je 32,5 m² und der 4-fachen Leuchtkraft eines iPhone-Screens nun täglich in die Wohnungen der umliegenden Häuser.
Hinzu kommt, dass das Parkhaus bislang kaum genutzt wird.

Wie kann es sein, dass so ein Bau genehmigt worden ist von der zuständigen Verwaltung?

👉 Unterstützt das Volksbegehren „Berlin Werbefrei“ mit eurer Unterschrift und stimmt im Herbst selbst darüber ab, wieviel Werbung Berlin verträgt!
➡️ Mehr Infos & die Unterschriftenliste auf unserer Webseite - berlin-werbefrei.de/

0
0
0
0
0
0
0
0
1
0
0
0
1
0
0
1
0
0
0
0
0
0
3
0
1
0
0
1
0
0
洪 民憙 (Hong Minhee) :nonbinary: @hongminhee@hollo.social
Public
Shared by 洪 民憙 (Hong Minhee)

A couple days ago, I got a DM from a user. I happily replied and sent a follow request—but the Accept never came back, even though they hadn't enabled manuallyApprovesFollowers. My DM reply probably never arrived either. Classic interop bug.

I checked out the Bonfire source and dug in. Turns out Bonfire hasn't implemented RFC 9421 yet, so it was silently discarding any activity signed with it. That alone would be workable, except for one more issue: Bonfire was responding 200 OK even when signature verification failed, instead of 401 Unauthorized.

This matters because Fedify implements a double-knocking mechanism—if a request signed with RFC 9421 fails, it retries with the older draft cavage signature. But since Bonfire returned 200 OK on the failed first knock, had no reason to send a second one.

I filed two issues on the Bonfire repo—one requesting RFC 9421 support, and one about returning 401 on invalid signatures. For the latter, I also sent a PR, which got merged pretty quickly: bonfire-networks/activity_pub#9.

That said, individual Bonfire instances won't pick up the fix until they actually deploy it. So in the meantime, I patched Hollo and Hackers' Pub to use draft-cavage-http-signatures-12 as the firstKnock, so Bonfire instances can at least understand the first request.

One last thing: Fedify caches whether a given server supports RFC 9421, and the Bonfire servers I'd already talked to were cached as “supports RFC 9421”—because they'd been returning 200 OK. I had to manually clear that cache on both hollo.social and hackers.pub before everything finally worked.

After all that, the mutual follow went through and my DM reply landed. Worth it.

RFC 9421: HTTP Message Signatures

This document describes a mechanism for creating, encoding, and verifying digital signatures or message authentication codes over components of an HTTP message. This mechanism supports use cases where the full HTTP message may not be known to the signer and where the message may be transformed (e.g., by intermediaries) before reaching the verifier. This document also describes a means for requesting that a signature be applied to a subsequent HTTP message in an ongoing HTTP exchange.

www.rfc-editor.org

0
3
0
0
0
0
0
0
0
0
0
0
0
1
0
Emile "iMil" Heitor @imil@bsd.cafe
Public
Shared by Stefano Marinelli

Setup an isolated web server as a smolBSD microvm in 1 minute:
```
FROM base,etc

LABEL smolbsd.service=smolweb
LABEL smolbsd.publish="8880:8880"

ARG PUBKEY="ssh-ed25519 foo user@bar"

RUN pkgin up && pkgin -y in caddy

RUN <<EOF
useradd -m smol
cd /home/smol
mkdir -p .ssh www
echo "$PUBKEY" >.ssh/authorized_keys
chmod 600 .ssh/authorized_keys
chown -R smol /home/smol
EOF

EXPOSE 8880

CMD /etc/rc.d/sshd onestart && \
caddy file-server --listen :8880 --root /home/smol/www
```
Documentation: github.com/NetBSDfr/smolBSD/tr

smolBSD is a tiny BSD UNIX (NetBSD) system creation tool, primarily aimed at building modern, lightweight, fast micro VMs - NetBSDfr/smolBSD

GitHub - NetBSDfr/smolBSD: smolBSD is a tiny BSD UNIX (NetBSD) system creation tool, primarily aimed at building modern, lightweight, fast micro VMs

smolBSD is a tiny BSD UNIX (NetBSD) system creation tool, primarily aimed at building modern, lightweight, fast micro VMs - NetBSDfr/smolBSD

github.com · GitHub

0
1
0
0
0
0
Doerk @NebulaTide@mastodon.bsd.cafe
Public
Shared by Stefano Marinelli

Want to get an overview on the current status of the world? Then take a look at world-monitor.app

It's an open source project which provides a freely available OSINT/Intelligence-Dashboard. It's open source and transparent, provided by a community and non profit. No fees, no subscription required.

You can even fetch the sourcecode from github an run it on your own servers. github.com/koala73/worldmonitor

It tracks in real-time active conflict zones + escalation rating, live tracking of military planes, battleships and dark behaviour of ships, nuclear plants worldwide, protests, sanctions and internet outages as well as military bases in nine countries.

The platform uses AI to read more than hundred news sources and to classify threads in realtime.

I think this is something worth taking a look at.

World Monitor — Real-Time Geopolitical Intelligence

Real-time geopolitical intelligence platform. Monitor global events, OSINT data, cyber threats, weather, markets, and military activity on an interactive 3D globe.

world-monitor.app

0
0
0
0
0
0
0
0
1
0
0
0
earthling @appassionato@mastodon.social
Public

World Nature Photography awards 2026 – in pictures

Mãhina
‘Sharing this moment with Mãhina and her protective mother is a memory that will live with me forever. It was undoubtedly one of the most extraordinary days I have ever experienced in the ocean – and perhaps ever will’ – Jono Allen. White humpback calf, Vava’u, Tonga. Gold in the Underwater category and World Nature Photographer of the Year.

Photograph: Jono Allen/World Nature Photography awards


White humpback calf, Vava’u, Tonga.
0
1
0
0
0
0
3
0
0
David Chisnall (*Now with 50% more sarcasm!*) @david_chisnall@infosec.exchange
Public

Video calling things that have worked reliably for me:

  • Signal: Just works.
  • Jitsi: bare bones, but works.
  • Cisco WebEx: Not used much, but not had any problems.

Video calling things that have mostly worked for me:

  • Google Meet.
  • MS Teams.

Both have had intermittent problems joining but have been fine when in.

Video calling things that have been horribly unreliable for me (excessive CPU usage, dropping connections, and so on):

  • Zoom

Apparently Zoom is better if you install the app, but given that they left a vulnerability that let remote attackers turn on and stream your camera and microphone unpatched for six months after disclosure, they're never allowed to run code on any computer I care about outside of a browser sandbox.

0
0
0
0
0
0
2
0
0
0
0
0
1
0
0