Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.
A friend, 
@chloetankahhui陳佳慧 AgeVerificationHater 🏳️⚧️ has been speaking up against the proposal to enforce age verification at the OS level, and the QRTs to this shows the extent of naivety that a lot of people have.
No one who does hardware security believes that any system is bulletproof, but do you really think that circumventing these things will always be a simple firmware mod or hardware hack?
Let's dive in. /1
過去に描いたキツキちゃん
でもホタルイカをかいました 
【告知】新曲を出しました！！！！！今の気持ちをごくごく素直にビートに乗せて歌っているチュンね💕誰でもリンク開けばすぐ聴けるからよろ～
戦争反対 prod. inuyasha
https://on.soundcloud.com/SdE4dlMcusE9Kz8d7s
P.Cafeのサーバー移行やっちゃおうかな
「金代大学というと中国史ですか？」
「いえ、近代現代のほうの」
「元代？」
진짜 옛말 틀린 거
하나도 없는 듯.
We're happy to announce a long-term partnership with Motorola. We're collaborating on future devices meeting our privacy and security standards with official GrapheneOS support.
https://motorolanews.com/motorola-three-new-b2b-solutions-at-mwc-2026/
RE: https://chaos.social/@sleepyowl/116126002122086149
A must read thread from 
@sleepyowlSchrödinger's Catgirl (Joyce), particularly for anyone laughing off the "oh they're trying to enforce age verification at an OS level, well I'll just change my open source operating system settings"
Y'all, this is the game where we get LOCKED OUT of having ANY real FOSS operating system we control AT ALL
The steps have been being put in place for this for over a decade now. And who controls the supply chain?
We have to fight this stuff tooth and nail.
過去に描いたキツキちゃん
구독을 끊다
1. 구독하던 서비스를 중단하다
2. 구독하는 서비스에 돈을 내다
תרמו להצבת מיגוניות בכפרים הבלתי מוכרים בנגב: https://omdi.me/405mT9K
עשרות אלפי תושבים ערבים-בדואים בנגב נמצאים ללא גישה למקלט או מיגונית. מבחינת הממשלה מדובר ב-"שטח פתוח" אבל בשבילנו מדובר בחיים ובביטחון של עשרות אלפי אזרחים שהממשלה הפכה לאזרחים סוג ב'.
אנחנו מתגייסים לרכישת מיגוניות תקניות לכפרים הבדואים בנגב. זה רגע קריטי שקורא לסולידריות בינינו: כל תרומה תעזור להציב מיגוניות תקניות ולהציל חיים!
🟣 לתרומה: https://omdi.me/405mT9K
1/2
@maikelMaikel 🇪🇺 🇪🇸 certainly not an utopia. In a chain of links weaving a social fabric 😃 I will pass on this post quote..
https://social.coop/@smallcircles/116159153490621069
> My feed is very carefully curated, and yet it still filters in.
Yes, the tools we have can be much improved to offer more support for Personal social networking.
@smallcircles🫧 socialcoding.. the problems are
1. Pics of Trump face with no trump text, so filters don't work.
2. Pics of Elon face with...see point 1. Like that all other US rage-producing club of billionaires or MAGAs.
3. Using tags as "USpol" requires manual intervention, nobody does.
4. Mastodon follows BOOSTS of whoever you add by default, instead of making those opt-in
5. People don't use alt-text so filters at least filter Trump face becaus eof the alt-text.
6. The worst one: people use other names instead to call them so filters don't work.
What commercial media gets right:
1. They have the power to guess...
편집부 입장문 보면 편집부가 작가에게 먼저 연락했고 편집장이랑 작화담당도 작가 과거를 잘 알고 있었다고. 그외엔 작화담당이 스토리작가 작품을 읽고 눈물을 흘렸다 같은 쓸모없는 문장으로 가득차 있어서 편집부의 안이한 태도가 드러난다. https://www.shogakukan.co.jp/news/477332
많은 만화가들이 망가원 연재를 중지하거나 기존 만화를 판매 중지하고 있는데, 특히 쇼가쿠칸 간판작 중에서도 프리렌과 타카하시 루미코 작품들이 판매 중지되었다. https://www.itmedia.co.jp/news/articles/2603/02/news085.html
한편 화별 판매로 구입한 작품이 판매 중단된 후 볼 수가 없는 상황이라 환불 정책을 논의중이라고.
お前ら、今年の6分の1終わってるぞ
何やってたんや、言うてみ？
久々に米沢行きたくなってきたわね
People who think "oh we'll just buy Chinese motherboards and chips" or "just use open source hardware"
WHO FABRICATES THE BOARDS AND CHIPS FOR OSHW? DO YOU BELIEVE STATES LIKE CHINA AREN'T INTERESTED IN SIMILAR MEASURES OF CONTROL?
This is the tech equivalent of tankie-ism.
/8
Go on, circumvent these measures & keep our tech open and free.
But know that many hackers find basic hardware hacking tools too costly and out of reach. WE'RE OUTRESOURCED.
PUSH BACK BEFORE THESE POLICIES BECOME NORMALIZED. DON'T RELY ON HACKING ALONE TO SAVE US.
/END
Microsoft bans the word "Microslop" on the official Copilot discord, then locks the server
lol
This is why GiovanH's blog article is a must-read.
People assume that accessible hacks of invasive systems will always exist, and users hacking their devices is to be expected.
THIS SHOULDN'T BE A NORM. THIS IS AN ARMS RACE AND WE'RE OUTMATCHED. /7
https://blog.giovanh.com/blog/2025/10/14/a-hack-is-not-enough/
People who think "oh we'll just buy Chinese motherboards and chips" or "just use open source hardware"
WHO FABRICATES THE BOARDS AND CHIPS FOR OSHW? DO YOU BELIEVE STATES LIKE CHINA AREN'T INTERESTED IN SIMILAR MEASURES OF CONTROL?
This is the tech equivalent of tankie-ism.
/8
Again, no one assumes that any system can be made 100% bulletproof. But that was never the point is it?
The end game is for manufacturers to harden their devices against cheaper tools and raise the barrier to entry such that it costs a fortune for hackers who might even try. /6
This is why GiovanH's blog article is a must-read.
People assume that accessible hacks of invasive systems will always exist, and users hacking their devices is to be expected.
THIS SHOULDN'T BE A NORM. THIS IS AN ARMS RACE AND WE'RE OUTMATCHED. /7
https://blog.giovanh.com/blog/2025/10/14/a-hack-is-not-enough/
There have been vulnerabilities in ME and PSP, and there MAY BE a way for users to bypass these checks.
But this assumes:
- Someone out there will put in labor to circumvent these things and release it freely, even at great expense.
- A simple, user doable hack even exists.
/5
Again, no one assumes that any system can be made 100% bulletproof. But that was never the point is it?
The end game is for manufacturers to harden their devices against cheaper tools and raise the barrier to entry such that it costs a fortune for hackers who might even try. /6
"Putting a former Meta lobbyist in charge of rewriting Europe's privacy rules – the so-called GDPR – is unacceptable" https://www.brusselstimes.com/1992574/ex-meta-lobbyist-put-in-charge-of-eus-digital-rules-tech-oligarchy-writing-its-own-rulebook
For now, these functions are not strictly enforced or turned on in a lot of consumer devices.
But is there anything stopping nation states from forcing hardware manufacturers and OEMs to do so?
What options do you have in such a case? /4
![Manufacturer response to IOActive's disclosures regarding AMD PSP implemenation flaws:
Acer:
“We appreciated your information about a possible vulnerability in Acer product. After thoroughly investigation, AMD PSB is an Optional Design during develop on
consumption product, it's not a mandatory requirement in Swift 3 SF314-42;
even though AMD PSB status is not enabled by default, platform with Secure Boot and Secure Flash are in position to protect system if malicious code injecting to flashROM, so we don’t consider this as a vulnerability.”
Lenovo:
“Platform Secure Boot was introduced as a standard feature on all consumer Lenovo laptops in 2022, and laptops manufactured prior to this date were not designed with this feature in mind. Enabling it on devices now in the field would be likely to frustrate consumers if any unexpected issues arise.”
Huawei:
“The PSB function was not enabled on our early AMD platform product, the PSB-like function(also known as “Intel Boot Guard”) was enabled on our later Intel platform product (such as MateBook 16s 2022).
We confirmed with the BIOS supplier (Wingtech Technology) of the AMD platform
product, there is no modification plan for this issue. To avoid confusing users, we
kindly ask you not to disclose this issue. [...]"](https://assets.chaos.social/media_attachments/files/116/126/053/536/385/352/original/3a36bc68acba4d69.png)
There have been vulnerabilities in ME and PSP, and there MAY BE a way for users to bypass these checks.
But this assumes:
- Someone out there will put in labor to circumvent these things and release it freely, even at great expense.
- A simple, user doable hack even exists.
/5
How do these security processors verify the firmware integrity?
Through a set of cryptographic keys and their hashes, which are used to verify the cryptographic signature of the UEFI firmware. These keys or hashes are *burned* into the processor and cannot be changed. /3
For now, these functions are not strictly enforced or turned on in a lot of consumer devices.
But is there anything stopping nation states from forcing hardware manufacturers and OEMs to do so?
What options do you have in such a case? /4
Since the late 2000s, computer chipsets have shipped with security processors like Intel Management Engine and AMD Platform Security Processor.
Part of their job is to verify that the UEFI firmware is from the computer OEM and has not been tampered with or comes from a 3rd party. /2
How do these security processors verify the firmware integrity?
Through a set of cryptographic keys and their hashes, which are used to verify the cryptographic signature of the UEFI firmware. These keys or hashes are *burned* into the processor and cannot be changed. /3
A friend, @chloetankahhui陳佳慧 AgeVerificationHater 🏳️⚧️ has been speaking up against the proposal to enforce age verification at the OS level, and the QRTs to this shows the extent of naivety that a lot of people have.
No one who does hardware security believes that any system is bulletproof, but do you really think that circumventing these things will always be a simple firmware mod or hardware hack?
Let's dive in. /1
Since the late 2000s, computer chipsets have shipped with security processors like Intel Management Engine and AMD Platform Security Processor.
Part of their job is to verify that the UEFI firmware is from the computer OEM and has not been tampered with or comes from a 3rd party. /2
artikel 36 der istanbul-konvention verpflichtet dazu, das einverständnis zum zentralen maßstab bei der bewertung sexualisierter gewalt zu machen. schweden, spanien oder dänemark haben solche gesetzesreformen schon durchgeführt – diese petition fordert, dass es nun auch endlich in deutschland so weit ist.
bitte zeichnet hier mit*: https://innn.it/ja #NurJaHeißtJa
*ich selbst gehöre zu den erstunterzeichnenden. wenn ihr nur bundestagspetitionen sinnvoll findet, setzt bitte selbst eine auf ✌🏻
The Horcrux was destroyed, apparently 
https://tom-riddle-diary.onrender.com/
A friend, @chloetankahhui陳佳慧 AgeVerificationHater 🏳️⚧️ has been speaking up against the proposal to enforce age verification at the OS level, and the QRTs to this shows the extent of naivety that a lot of people have.
No one who does hardware security believes that any system is bulletproof, but do you really think that circumventing these things will always be a simple firmware mod or hardware hack?
Let's dive in. /1
Be like Netlify. Support the maintainers you depend on.
We all work together, or we all fail together.
RE: https://bsky.app/profile/did:plc:2r34nn3vhizjhrywajc4jjnn/post/3mg36x6bb3k24
도대체 서비스음료 추가 선택하면 단품 음ㄴ뇨보다 비싸게 받는건 뭐지 서비스로 비싸게 사기 옵션인가
Zhangping, #China
Cherry blossom trees in full bloom at a tea garden.
Photograph: China News Service/Getty Images
today, we're announcing our €3,8M ($4.5M) seed financing round, led by byFounders with participation from Bain Capital Crypto, Antler, Thomas Dohmke (former CEO of GitHub), Avery Pennarun (CEO of Tailscale) among other incredible angels.
read more on what's next: blog.tangled.org/seed
announcing our €3,8M seed roun...
RE: https://mastodon.social/@Edent/116155016551077490
This is a really fun (and informationally-valuable) project. Have you contributed?
サングラスをかけるかかけないかでプロレスしたい気分(雑に映画の感想)
近日親中派：
... 다른 지역은, 고구마 순 감자탕 안 먹어요? #당황
Be like Netlify. Support the maintainers you depend on.
We all work together, or we all fail together.
RE: https://bsky.app/profile/did:plc:2r34nn3vhizjhrywajc4jjnn/post/3mg36x6bb3k24
Jan Lehnardt 
힐씨
とるねど
🕊️
Jake Howard
The Rt. Rev. Fumire, Ph.D.
Tom Casavant
boltless.me
🍣🎧🔊@
DevelopersIO 