What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

0
0
0
0
0
0
0
1
0

Congrats to @thisismissem.social@bsky.brid.gyEmelia for the well deserved financial support. She contributes across atproto and ActivityPub, & with the IETF OAuth standards. FedCM is a W3C web platform API that “allows users to login to websites with their federated accounts in a privacy preserving manner”

RE: https://bsky.app/profile/did:plc:5w4eqcxzw5jv5qfnmzxcakfy/post/3mgniewoy322j

0
0
0
0
0
0
4
0
0
0
20
0
0
0

Emelia has already done so much great standards and auth work behind the scenes, which benefits not just atproto/atmosphere, but also ActivityPub, Solid, and other social web ecosystems. really excited about the potential for FedCM to make login flows slick and competitive with Google/Apple/Meta

RE: https://bsky.app/profile/did:plc:5w4eqcxzw5jv5qfnmzxcakfy/post/3mgniewoy322j

0
0
0
0
0
0
0
0
0

part of it is i just don't have any mental model for what actually happens when it's off and then on like does soundness REQUIRE catching up on every firehouse event? or does soundness not require it but "resync everything missed" could be expensive? or there's no technical way to distinguish?

0
0

WebPKI and You

There’s been a push over the last twelve years to move web traffic off unencrypted HTTP to encrypted HTTPS, to protect the general public from dragnet surveillance, gaping assholes on public wifi>airpwn, backhauls over unencrypted satellites, that kinda thing. HTTPS relies on a public key infrastructure to make sure only authorized servers have keys for specific websites. [>oid]: an OID or “Object IDentifier” is intended [brs]: https://cabforum.org/working-groups/server/baseline-requirements/documents/CA-Browser-Forum-TLS-BR-2.1.8.pdf [crtsh]: https://crt.sh/?q=blog.brycekerley.net [lol-diginotar]: https://en.wikipedia.org/wiki/DigiNotar#Issuance_of_fraudulent_certificates [iv-ocsp]: https://www.imperialviolet.org/2011/03/18/revocation.html [>mac-ocsp]: Jeff Johnson’s [>crlite]: these use cascading bloom filters which [>short-lived]: the CA/BF baseline requirements [trustico-chrome]: https://security.googleblog.com/2017/09/chromes-plan-to-distrust-symantec.html [trustico-gone]: https://arstechnica.com/information-technology/2018/03/trustico-website-goes-dark-after-someone-drops-critical-flaw-on-twitter/ [trustico-compromise]: https://groups.google.com/g/mozilla.dev.security.policy/c/wxX4Yv0E3Mk/m/o1cdfx2nAQAJ [>enclaves]: Amazon Web Services (AWS) and [>history]: i mean, i remember from when it happened [>parasite]: You may have realized that I don’t think [van-halen]: https://snackstack.net/2023/07/03/in-search-of-van-halens-brown-mms/ [>osi]: I’m not going to hit you with a [>responsibility]: in every part of your life! [>bloom]: [>later]: At time of publishing, it’s March 8, 2026 [hsts]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Strict-Transport-Security [>hsts]: This is generally a hardcoded value, [>cattle]: “cattle” is when there’s [ari]: https://letsencrypt.org/2025/09/16/ari-rfc [>caddy-ari]: I checked Caddy, the front-end server [>left]: there may be value in trying to renew [audits]: https://cabforum.org/about/information/auditors-and-assessors/audit-criteria/

blog.brycekerley.net · Bryce’s Blog

0
0
1
0

Seems painfully obvious that, whatever you think about code, anyone using it is heading for a code-review logjam. Assuming that the org requires code review; if yours doesn’t, nothing I can say will help you. Anyhow, Rishi Baldawa writes smart stuff about the problem and possible ways forward, in ˚The Reviewer Isn't the Bottleneck”: rishi.baldawa.com/posts/review

[My prediction: A lot of orgs will *not* do smart things about this and will suffer disastrous consequences in the near future.]

0
1
0
0
0
0

El 28 de febrer vam celebrar la segona fedifesta a Alacant, i va ser tot un èxit i molt interessant 😊

Una vintena de persones vam aprendre sobre el fedivers, i cam compartir dades i anècdotes sobre la nostra experiència amb les xarxes socials en general. Molta gent es va fer un compte a Mastodon, i sobretot hem fet comunitat amb persones i col·lectius d'Alacant, i compis de Citical Switch (@criticalswitch) i Múrcia (@elena, @kyva⁂ Kyva :veenk_logo:). Gràcies a totes per vindre 🧡

Per a qui no haja pogut vindre, us passem dos enllaços:
- com fer-me un compte a mastodon: sindominio.net/lafurgo/
- aprendre sobre el fedivers: critical-switch.org/ca/posts/i

També podeu seguir-nos al mastodon: @raconet, @casaltiocucCasal Popular Tio Cuc Alacant

Esperem veure-vos a la següent!

Persones assegudes en rogle dins del casal debatint i mirant una presentació projectada en la pantalla de projector.
0
0

Very excited for the new projects we have in the works that Jay will now be leading more directly as CIO. She has always been excellent at seeing the vision and knowing where to go, so glad that we're unburdening her from the day to day of running the company.

RE: https://bsky.app/profile/did:plc:oky5czdrnfjpqslsw2a5iclo/post/3mgnkkbkw2c2v

0
0
0
0

@alex.bsky.team if Tap is the recommendation in the docs, i think it's important to not just verify that it runs, but to also verify that an actual development workflow — such as closing your laptop and then continuing work next day — also works i feel like this is an assumption that nobody tested

0
0
0
0
0

What I listened to today: 2024-05-22 Mastodon post, Autechre

Sean Booth of Æ has a Fediverse account and one day last year posted this gorgeous outtake from Oversteps (which I still consider Æ's most risk-taking album). It's kind of breathtaking, utterly unlike Æ, a labyrinth of classical spanish guitar, while also quintessentially Æ and very "yeah that, that's an Oversteps track". I think of this as a cousin to known(1) but I feel shadows of other songs of that era too

data.runhello.com/blj/autechre

What I'm listening to today: "Southside", Lil Keke

What if I spent this entire week linking classic "dirty south" hip-hop tracks I loved from 97.9 The Box back in the 90s (which, I am visiting Houston this week and their selection is still excellent). No one could really stop me.

Here's known DJ Screw associate Lil Keke, dropping an effortless flow that stuck in my head for 29 years and my favorite instance of slide guitar in the entire corpus of music. Sorry Beck

youtube.com/watch?v=kg7cThO_vgo

0
0
0
0

in reality my workflow is to constantly delete tap .db file, truncate my local db tables, and do a clean resync. multiple times a day because Tap gets stuck everytime. this workflow is way worse than when i had my own ingester which at least behaved predictably and reacted instantly.

0