What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

JB-LD, JB with Linked Data @jb@waf.moe
Public

chat visit my webbed site

https://jbc.lol/?utm_source=google&utm_medium=cpc&utm_campaign=summer_sale_2026&utm_term=buy+cheap+shoes+online&utm_content=banner_ad_variant_b&utm_id=camp_98765&utm_creative=creative_001&utm_placement=search_top&utm_network=g&utm_device=mobile&utm_devicemodel=iphone_15&utm_matchtype=exact&utm_adposition=1t1&utm_geo=US-CA-LosAngeles&gclid=EAIaIQobChMI_abc123xyz&gclsrc=aw.ds&dclid=DCL987654321&fbclid=IwAR3abc123def456ghipqx234yz&fb_ad_id=23856789012345678&fb_adset_id=23856789012345679&fb_campaign_id=23856789012345680&ttclid=7c8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b&tiktok_ad_id=TTad_00112233&snapchat_click_id=sc.click.1234567890abcdef&pinterest_click_id=pin.click.abcdef123456&li_fat_id=abc123-def456-ghi789-jkl012&msclkid=msabc123def456ghi789&yclid=1234567890123456789&gbraid=0AAAAADk7abc123xyz&wbraid=ABcDeFgHiJkL&twclid=twit_click_abc123def456&rdclid=reddit_click_xyz789abc&obclid=outbrain_click_456def789&taboola_click_id=taboola_123abc456def&affiliate_id=AFF-00987&aff_sub1=email_list_vip&aff_sub2=segment_b&aff_sub3=us_west_coast&aff_sub4=offer_type_cpa&aff_sub5=creative_video_30s&offer_id=OFFER-2026-SUMMER&transaction_id=TXN-20260320-XK9281&session_id=sess_abc123def456ghi789&visitor_id=vis_zyx987wvu654&device_id=dev_aabbccddeeff0011&fingerprint_id=fp_a1b2c3d4e5f6&experiment_id=exp_ctrl_varB&variant_id=var_002&ab_group=B&segment=high_value_returning&cohort=2026_Q1&source_platform=google_ads&ad_format=responsive_search&keyword_id=kw_00112233&placement_id=plc_aabbccdd&publisher_id=pub_99887766&sub_publisher=subpub_xxyyzz&referrer_url=https%3A%2F%2Fwww.google.com&landing_page_version=v3&page_variant=hero_image_b&cta_version=cta_red_button&entry_point=top_nav&funnel_step=awareness&channel=paid_search&sub_channel=brand_terms&cost_per_click=0.87&bid_strategy=target_cpa&conversion_goal=purchase&attribution_model=data_driven&lookback_window=30d&view_through=true&cross_device=enabled×tamp=1742428800&checksum=a1b2c3d4e5f6789012345678

welcome to jb's site

jbc.lol

Link author: JB-LD, JB with Linked Data@jb@waf.moe

0
0
0
𒁹𒀭𒌍𒋾𒀀𒅆 @unninni@daepi.so
Public
렌게님의 경제이야기를 보니 사태를 너무 낙관적으로 보고 계신 것 같아 걱정입니다.
0. 이란은 그만둘리가 없고, 그만두게 할 동력을 잃었고.
1. 호르무즈 문제, 각 유전들의 테러문제, 각종 기름에 엃힌 연결고리들이 기름값을 높일 예정
2. 기름 나는 곳 근처에서 천연가스가 나오는데 거기도 공격받는 중이고, 당장 전기에 문제 생기는 국가들이 늘어나고 있고, 우리도 곧 입니다.
3. 아참 천연가스 나는 곳에서 비료도 납니다. 비료가 없으면 생산량 조절이 안되면 곡물을 기반으로 하는 경제 순환에 문제가 생깁니다.
4. 그 중 하나가 옥수수 에탄올인데 이미 미국 콘벨트에서 비료가 부족할 것 같아 옥수수 대신 대두로 바꾸기 시작했습니다. 그럼 옥수수 에탄올과 함께 써야하는 연료 비용이 오르겠지요? 이런 것에 준비된 국가가 그나마 중국입니다.
5. 천연가스 유전에서 헬륨도 나오는데요, 그 헬륨 전자장비/반도체에 쓰입니다.(당장 여러분의 하드디스크만 봐도?) 그럼 IT 인프라들은 어떻게 될까요? GPU 생산에 차질은 없을까요? 아차 가스가 없어 발전을 못하니 데이터센터도 못돌리겠군요.
6. 석유에서 나오는 것 중에 각종 바이닐 제품들이 있는데 이것도 지장 생기기 시작했습니다. 어디 들어가는 필름들 원자재들이 펑크나기 시작하면... 조선/자동차/건설 등등...
꽉잡으십시요. 이건 벌어질 일이 아니라 향후 12-18개월간 확정된 일입니다.
1
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
Fred Rocha @john_fisherman@mastodon.social
Public

Yeah, I dig @brucelawsonBruce Lawson ✅ (quiet time) 's podcast on the web, "For a Better Web".

In this episode, @evanEvan Prodromou wants all Tech Giants to join the Fediverse, start using ActivityPub, never mind the promotion of lies, hate, fascism.

The Social Web Foundation (@swf) seems to me as a fundamentally flawed project, because, as Audre Lorde so eloquently and famously put it:

"The master's tools will never dismantle the master's house."

Listen and discuss here:

pocketcasts.com/podcast/for-a-

The Fediverse - The Road to an Open Social Web

In this episode, Bruce’s guest is Evan Prodromou, Research Director of the newly-launched Social Web Foundation. They discuss interconnected social networks and ActivityPub, the open standard that…

pocketcasts.com

Evan Prodromou @evan@cosocial.ca
Public
Shared by Inside Fediverse

@john_fishermanFred Rocha there are a lot of good reasons to connect existing social networks to the Fediverse.

Mostly, so people on the Fediverse can stay connected to people that matter to them -- friends, family, colleagues, neighbors. Connecting to people is what social networks are for.

Second, so people on those networks can more easily move onto platforms they control themselves. We are getting better and better tools for those moves.

0
0
0
1
0
0
1
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
Lilith Wittmann @Lilith@chaos.social
Public

Dear Malta Gaming Authority,
Yes, I hacked you, and the data obtained has been shared with media partners, authorities,….

And yes, we will expose the organized crime enablement schemes you created while presenting yourselves as a “legitimate public service”.

News 17 March 2026 Statement on the Identification of a System Breach The Malta Gaming Authority has identified a breach within one of its systems and immediately activated its internal response protocols. Upon identification, all necessary containment and mitigation measures were implemented as a precaution, and the Authority has dedicated all relevant technical and operational resources to a thorough investigation. Based on the information available at this early stage, initial indications suggest that the activity may be attributable to an individual presenting themselves as a security researcher. Investigations remain ongoing to establish the full facts and to ensure that all appropriate safeguards are in place. The Authority is treating this matter with the utmost seriousness and continues to work closely with its technical teams and the relevant authorities to assess the situation comprehensively. Further updates to impacted entities will be provided in due course.
1
4
0
Angry Discordant @enigmato.bsky.social@bsky.brid.gy
Public

개인으로써 하는 주장이고 설득이 목적이었던 발화도 아니었으니 별 수 없는 귀결이기는 한데, 딱 마지막으로 들은 비아냥의 수준만큼은 기분이 상하긴 했다. 하기는, 그렇게 이입한 사람이 고까운 소리에 상할 기분만큼이기야 하겠냐만서도...

0
0
0
0
0
0
Stefano Marinelli @stefano@bsd.cafe
Public

Update: the FTTC connections are still down, despite all the promises to restore them by noon.

People are desperate as "weekend is coming and I cannot access my streaming services!"

I'm considering to extend my business and rent my old DVD players and DVD/Bluray disks to my neighbours.

0
0
0
0
0
0
0
0
0
0
0
0
nixCraft 🐧 @nixCraft@mastodon.social
Public
Shared by Stefano Marinelli

Google sets new 24-hour process to sideload unverified developers Android apps. That is right. Now you can't load apps without google's permission and flow control. Who knows after sometime they might think 72 hours delay is needed and so on. More info android-developers.googleblog.

Google says this is to stop malware from stealing passwords, OTPs, and bank/card info. Do you think these steps will actually stop scammers who call and pressure people into installing malicious apps?

Title: Advanced flow for power users to sideload apps from unverified developers It shows a 4 step security process: 1) confirming no one is coaching you 2) restarting the phone to cut off remote access 3) a 24-hour security delay to install the sideload app using unverified developers 4) final confirmation and enabling of settings
0
11
1
0
3
0
0
0
0
1
0
0
0
0
0
0
0
0
Dan Langille @dvl@bsd.network
Public
Shared by Stefano Marinelli

net/sslh just came to my attention:

"sslh accepts connections on specified ports, and forwards them further based on tests performed on the first data packet sent by the remote client."

That sounds useful.

freshports.org/net/sslh/

FreshPorts -- net/sslh: SSL/SSH multiplexer

sslh accepts connections on specified ports, and forwards them further based on tests performed on the first data packet sent by the remote client. Probes for HTTP, TLS/SSL (including SNI and ALPN), SSH, OpenVPN, tinc, XMPP, SOCKS5, are implemented, and any other protocol that can be tested using a regular expression, can be recognised. A typical use case is to allow serving several services on port 443 (e.g. to connect to SSH from inside a corporate firewall, which almost never block port 443) while still serving HTTPS on that port. Hence sslh acts as a protocol demultiplexer, or a switchboard. With the SNI and ALPN probe, it makes a good front-end to a virtual host farm hosted behind a single IP address. sslh has the bells and whistles expected from a mature daemon: privilege and capabilities dropping, inetd support, systemd support, transparent proxying, chroot, logging, IPv4 and IPv6, TCP and UDP, a fork-based and a select-based model, and more.

www.freshports.org

0
1
0
Rebane @rebane2001@infosec.exchange
Public

hii! if you're someone learning webdev and specifically css, what are some difficult or hard to understand/grasp parts for you?

i wanna make some beginner-friendly tutorial stuff and it would be good to know what i should focus on the most

0
9
0
hackaday @hackaday@hackaday.social
Public

This Week in Security: Linux Flaws, Python Ownage, and a Botnet Shutdown

hackaday.com/2026/03/20/this-w

This Week In Security: Linux Flaws, Python Ownage, And A Botnet Shutdown

The ides of security March are upon us — Qualys reports the discovery by their threat research unit of vulnerabilities in the Linux AppArmor system used by SUSE, Debian, Ubuntu, and Kubernete…

hackaday.com · Hackaday

0
0
0
0
0
0
0
0
0
Fabio Manganiello @fabio@manganiello.eu
Public
Shared by Stefano Marinelli

#Android is fucking dead.

If you have an Android device, please wipe it and install #PostmarketOS today while you can still unlock the bootloader.

We all know that #Google wants to kill the “unverified/sideloaded” apps (names carefully selected by Google’s professional gaslighters to give a negative connotation to “apps that are not distributed by Google’s own store”).

We all know that the new “verification process” amounts basically to a ransom where you need to give Google your keys and your money if you want to build apps for Android.

It involves developers handing their signing keys to a user-hostile American company (so they will sign your package for you and will also able to decrypt your secrets) and paying them a $25 fee for each app.

Even if you don’t even use the Play Store to distribute your apps.

This is not a price to pay to get the app distributed through them, nor for using any of their services. It’s a price to pay just because they want to control the whole ecosystem end-to-end, and they know that they can get away with that because you’ll keep using their shitty OS even if you’re outraged at them.

We all know that they got a lot of backlash. And after the backlash they reiterated that they “listened to the community” and would have made a process to still allow people to “sideload apps”.

Well, today that process has been finally unveiled. And it sounds even shittier than I thought.

That’s because Google is currently filled with the best professional enshittificators in the world: the job role of these people is not to build new things, nor to listen to customers and build what they want. No, their job is specifically to find the sweet spot where they can make things as shitty as possible, add as much friction and user frustration as possible to prevent them from doing a certain thing, while still being able to tell regulators “well, it’s not that shitty, you see? We still give users an option - buried under 10 layers of dark patterns”.

In order to install apps external to the Play Store you will have to:

  • Activate the developer settings (the usual “tap the build number 7 times to show the hidden menu” thing)

  • In the developer settings, enable “Allow Unverified Padckages”

  • Confirm that you are not being coerced (seriously, how much malware did they actually see installed by people being coerced or tricked to download and install random APK files?)

  • Restart your device

  • Wait 24 hours

  • Return to the unverified packages settings

  • Scroll past 3-4 additional warnings whose sole purpose is to scare you off

  • Select either “Allow temporarily“ (7 days) or “Allow indefinitely“ (and I’ve got a hunch that the Allow indefinitely option will probably be gradually phased out)

https://arstechnica.com/gadgets/2026/03/google-details-new-24-hour-process-to-sideload-unverified-android-apps/

Google details new 24-hour process to sideload unverified Android apps

The "advanced flow" will be available before verification enforcement begins later this year.

arstechnica.com · Ars Technica

0
3
1
0
0
0
0
1
0
0
0
0
0
0
0
Angry Discordant @enigmato.bsky.social@bsky.brid.gy
Public

방어적인 반응인 것은 알고 있었고, 그것이 어떤 심리에서 오는지는 이해한다. 하지만 '동일시' 말이 나온 김에 언급해 두지만, 그것이야말로 대상에 동일시에 가까운 이입을 하는 일이다. 건설적이지 않다. 안타깝다.

0
0
0
0
0
0
1
0
0
0
0
0
0
0
0