Profile img

Jiwon

@z9mb1@hackers.pub · 118 following · 93 followers

Github
@sij411
kwonjiwon.org
kwonjiwon.org
oeee.cafe
oeee.cafe/@z9mb1

Update: we've decided to go ahead and submit the CFP to @COSCUP 2026. The track will be called Fediverse & Social Web—think FOSDEM's Social Web devroom, but in Taipei. is free to attend, like FOSDEM.

If the track is accepted, would you be interested in coming to Taipei (Aug 8–9) to give a talk?

(Boosts appreciated!)

https://hollo.social/@hongminhee/019ca8b2-ecca-7150-a237-37f35de45401

0
2
0

I'm super hyped to announce that Bluesky Socal PBC has given me a grant to work on the Federated Credential Management (or FedCM) standards to make them really work for all decentralized web applications.

This is why I stepped up to be an Invited Expert with the W3C FedID Working Group earlier in the year. The missing part at that time was "how do I fund this work?" so I'm super happy that Bluesky Social PBC really came through with a grant to fund this work.

A really interesting thing that Bluesky Social PBC did here was they could have said "just make this work for AT Protocol" but instead they said "make this work for the entire decentralized web", and the contract explicitly states I should be working with the IndieAuth, Solid and other communities interested in federated and decentralized identity to make this happen.

decentralizing-fedcm.leaflet.p

0
14
4

Legal vs. Legitimate, good article by @hongminhee洪 民憙 (Hong Minhee) :nonbinary:

> Whatever courts eventually decide about AI reimplementation, the question we need to answer first is not a legal one. It is a social one. Do those who take from the commons owe something back? I think they do. That judgment does not require a verdict

"Can the commons expect something back from those who extract value?" is a key question of Social experience design. The answer forms one of 3 core principles: The Mindfulness principle.

No. You can't expect *anything* back. That philosophical insight is crucial to organizing a healthy commons that's able to retain its value and evolve.

Paint any principles and values on a flag but as long as the battle is scattered farmers holding feeble Copyright Law pitchforks against a vast drone army, its no use. Know thy enemy helps too. It's not proprietary code or corporations. It's hypercapitalism: The Rules of Battle.

writings.hongminhee.org/2026/0

news.ycombinator.com/item?id=4

coding.social/blog/reimagine-s

0

I've been saying for a while that we need something like FediCon in East Asia. A dedicated conference is still a stretch, but I've been thinking about a smaller step:

@COSCUP 2026 (Taipei, Aug 8–9) is accepting proposals for community tracks. It might be worth trying to open a Social Web track there—something in the spirit of the Social Web devroom at FOSDEM.

Nothing is decided yet, but if you're working on , the , or anything in the social web space and might be interested in speaking (or co-organizing), I'd love to hear from you.

https://floss.social/@COSCUP/116152356550445285

()아시아에도 FediCon 같은 行事(행사)가 있으면 좋겠다는 말을 여러 () 해왔는데요. 獨立的(독립적)인 컨퍼런스는 아직 어렵더라도, 작은 첫걸음으로 생각해보고 있는 게 있습니다.

@COSCUP 2026(臺北(타이베이), 8() 8()–9())이 커뮤니티 트랙 提案(제안)을 받고 있어요. FOSDEM의 Social Web devroom 같은 느낌으로, 거기서 Social Web 트랙을 열 수 있지 않을까 하고 構想(구상) 중입니다.

아직 確定(확정)된 건 아무것도 없지만, , , ()은 소셜 웹 全般(전반)을 다루고 있고 發表(발표)共同(공동) 오거나이징에 關心(관심)이 있으신 분이 있다면 이야기 걸어주세요.

https://floss.social/@COSCUP/116152356550445285

1
0
0
0

Jiwon shared the below article:

일주일만에 새로운 엑셀 라이브러리를 만들다

Haze @nebuleto@hackers.pub

SheetKit은 기존 Node.js 엑셀 라이브러리들의 성능 한계와 기능 제약을 해결하기 위해 Rust로 개발된 고성능 스프레드시트 라이브러리입니다. 저자는 대량의 데이터 처리와 동적 템플릿 생성을 위해 Rust 코어 기반에 napi-rs를 활용한 Node.js 바인딩 구조를 설계했으며, 코딩 에이전트와의 긴밀한 협업을 통해 단 일주일 만에 초기 배포부터 v0.5.0 릴리스까지 달성했습니다. 특히 자바스크립트 객체 생성에 따른 가비지 컬렉션(garbage collection) 압박을 줄이기 위해 이진 버퍼(binary buffer)를 통한 데이터 전송 방식을 도입하고, 지연 로딩(lazy loading)과 스트리밍 리더 기능을 통해 대용량 파일 처리 효율을 극대화했습니다. 벤치마크 결과 기존 라이브러리 대비 압도적인 메모리 절감과 속도 향상을 보여주었으며, 특정 쓰기 시나리오에서는 V8 엔진의 최적화 덕분에 Rust 네이티브보다 빠른 성능을 기록하기도 했습니다. 현재 164개의 수식 함수와 43개의 차트 타입을 지원하며 실제 업무 현장에 성공적으로 적용 중인 SheetKit은 Node.js 환경에서 대규모 엑셀 데이터를 다루는 개발자들에게 강력하고 효율적인 솔루션을 제공합니다.

Read more →
9

Jiwon shared the below article:

Building a New Excel Library in One Week

Haze @nebuleto@hackers.pub

SheetKit is a high-performance Rust-based spreadsheet library designed for Node.js to address the limitations of existing Excel processing tools. Developed over a single intensive week using an architect-led workflow with coding agents, this library leverages napi-rs to provide comprehensive support for the OOXML specification, including complex features like charts, conditional formatting, and extensive formula functions. To overcome the memory overhead and garbage collection pressure typical of JavaScript-heavy Excel libraries, the architecture utilizes a specialized raw buffer FFI protocol and lazy-loading mechanisms. These optimizations allow SheetKit to handle massive datasets with a significantly reduced memory footprint, occasionally outperforming native Rust implementations in specific write scenarios due to efficient string interning within the V8 engine. The project introduces advanced capabilities such as streaming readers for forward-only processing and copy-on-write saving to bypass unnecessary re-serialization of unchanged data parts. This development represents a significant step forward in Node.js data processing, offering a robust and scalable solution for developers managing high-volume or complex spreadsheet workflows.

Read more →
5

Jiwon shared the below article:

洪 民憙 (Hong Minhee) :nonbinary: @hongminhee@hollo.social

<p>Hi all, I'm Emelia, the co-lead of the <a href="https://github.com/swicg/activitypub-trust-and-safety/" rel="nofollow ugc">ActivityPub Trust &amp; Safety Taskforce</a> operating under the Social Web CG. We're starting this forum to try to encourage a bit more asynchronous participation in the taskforce and provide a fediverse-native touch point for people interested in trust and safety.</p> <p>This forum <em><strong>does not</strong></em> replace the <a href="https://github.com/swicg/activitypub-trust-and-safety/issues" rel="nofollow ugc">GitHub issues</a> for the taskforce, where we have specific discussion.</p>

Read more →
0
0

This initiative as part of the FreeBSD laptop support enhancements project didn't pan out in time for FreeBSD 15.0 but now they are working on getting the installer option ready for FreeBSD 15.1: FreeBSD 15.1 Aims To Have KDE Desktop Installer Option - Phoronix phoronix.com/news/FreeBSD-15.1

1
2

마스토돈 스타일의 새로운 커뮤 플랫폼, 커뮹! 모바일 앱이 출시되었어요! 베타 테스트에 참여해주신 여러분, 커뮹!에서 활동해 주시는 여러분 모두 응원해주셔서 감사합니다 🐓📲🥰

iOS: apps.apple.com/us/app/commung/
Android: play.google.com/store/apps/det

2
0
2
3
0
0
0

I finally got the data transfer from the AISC110C high-speed camera sensor working!

It's a 5€ chip that outputs 80x120 video at up to 40k fps.

Data is read with a Xilinx Spartan7 and transmitted via USB3 with a Cypress FX3, each on its own little PCB.

The front PCB is exchangeable, making this a neat modular platform. I already have an analog video frontend with the ADV7182 and am working on a Cameralink interface.

Videos are coming tomorrow, I need more light for the high framerates.

A greyscale image of a hand giving thumbs-up. It's a video capture of the highspeed sensor, albeit only recording at 30fps with 8ms exposure time in this case.A stack of three PCBs sitting on a grey 3D-printed base (the back of the camera housing)  lying on top of a hand. The uppermost PCB has the image sensor on top. Between the upper and middle PCB a 80 pin connector is visible. The middle and lower PCB have some components visible on their top sides.The grey 3D-printed casing of the PCB stack is sitting in a bracket on top of a camera mount. On the front a metal CS-mount thread is screwed into the 3D-print. Inside that, a printed adapter is holding a black M12 lens.
0
0
0

Jiwon shared the below article:

미소녀 보려고 미연시를 켰더니 게임 콘솔이 해킹당했어요

Helloyunho @helloyunho@hackers.pub

Ren'Py 기반 PlayStation(플레이스테이션) 게임에서 발생하는 취약점을 이용한 익스플로잇 도구인 yarpe(Yet Another Ren'Py PlayStation Exploit)의 개발 과정과 기술적 원리를 다룹니다. 이 프로젝트는 Python(파이썬)의 Pickle(피클) 라이브러리가 역직렬화 과정에서 임의의 코드를 실행할 수 있다는 보안 결함을 활용하며, 세이브 파일 내부의 데이터를 조작하여 게임 엔진의 제어권을 획득합니다. 저자는 메모리 권한 제한을 우회하기 위해 ROP(Return Oriented Programming) 기법과 unsafe-python을 도입하여 직접적인 메모리 접근 및 스택 포인터 조작을 구현했습니다. 특히 Xbox(엑스박스)에서의 성공적인 초기 실험을 바탕으로 PlayStation 5의 실행 전용 메모리(XOM)와 같은 까다로운 보안 제약 사항을 극복하고 최종적으로 코드를 실행하는 과정을 상세히 설명합니다. 이 글은 복잡한 하드웨어 보안 환경 속에서도 논리적인 분석과 창의적인 접근을 통해 시스템의 한계를 시험하는 과정을 보여주며, 임베디드 보안과 리버스 엔지니어링에 관심 있는 독자들에게 깊이 있는 기술적 통찰을 제공합니다.

Read more →
6
0
0
0

Soooo... There's already some big stuff in the works for 2026:

The Social Web Foundation (@swf) has kicked off a project to bring real end-to-end encryption to the Fediverse. It's a big undertaking, with real financial backing from the @sovtechfundSovereign Tech Agency

Check out the announcement: socialwebfoundation.org/2025/1

And, I'm very excited that is one of the projects selected to participate in the work alongside the @bonfire team.

1/

0
0
0

Calling all developers for help: I'm currently trying to implement a () feature for Hackers' Pub, an -enabled community for software engineers. Is there a formal specification for how cross-instance reporting should work in ActivityPub? Or, is there any well-documented material that explains how the major implementations handle it?

2
0
0
0
2

Vibe coding an open source project means giving up on collaboration.

Nobody wants to read your AI slop.
Nobody wants to write up a bug report that will just be fed to the LLM.
Nobody wants to spend more time debugging something than you spent writing it.
Nobody wants to spend time implementing a new feature when the existing ones are held on by autocomplete vomit.
Nobody wants to share ideas, feedback, or critiques when they know they won't matter to the LLM.

1
0
0

incredible, github is going to start charging for self-hosted actions runners (in private repositories)

We are introducing a $0.002 per-minute Actions cloud platform charge for all Actions workflows across GitHub-hosted and self-hosted runners.

resources.github.com/actions/2

2
0
0
0
0
0
0

최근 부탁을 받아 PixiJS로 작은 미니 게임을 하나 만들었습니다. 만든 게임은 나이키의 조던 출시 이벤트 파티에서 쓰였습니다. 제가 만든 프로그램을 사람들이 사용하는 모습을 현장에서 직접 보니 신기하기도 하고 뿌듯하기도 했네요. 가끔 정형적인 앱에서 벗어나 자유분방한 프로그램을 만들고 싶었는데 그런 욕구를 해소할 수 있는 좋은 기회였습니다!

파란 조명의 이벤트 행사장을 배경으로 손에 아이패드가 들려있다. 아이패드 화면에는 레이더망과 조던 로고가 보인다.
4
3
3
1
0

“Transgender for everybody”, but unironically. As in, spend some time deconstructing your gender and then actively choose what gender roles and expressions you actually do and don’t want to perform. Deconstruct your sexuality too. Deconstruct your religion. Deconstruct anything you were indoctrinated into so you can be authentically you

0
9
1

내가 느끼는 가장 큰 의 진입장벽이라면 activitypub 관련 코드랑 비즈니스 로직이랑 완전히 커플링되어 있는 것도 좀 큰 것 같은데, 어떻게 계층을 분리할 수 있을지 고민임.

Misskey도 계층이 잘 분리가 되어있어서 군데군데 테스트가 적당히 짜여져 있는데.... 당장은 OpenAI Codex/Claude Code on Web으로 짜도 기여할 수 있을 정도로 구조를 잘 다듬긴 해야겠다는것

3

Officially unemployed now after almost 5 years at aws working completely in the open on the Rust compiler.

With rustnl.org/fund/ and rustfoundation.org/media/annou both figuring out how to ensure maintainers are paid to do reviews, refactorings and mentoring, I'm optimistic I can continue doing my work in the future.

If your company uses Rust a lot and would like to support it and talk about how that support can either indirectly or directly benefit its Rust-writing employees, I'm happy to chat to explain both funds and make the connection to the right fund for you. Or just skip directly to one of the funds if you already know ppl there!

0

I think I have identified a fairly significant flaw in how the currently operates. Hear me out.

The Fediverse currently consists of all sorts of different systems - , , , , , and so forth. And while they are all connected via the protocol, they all have different functionalities and different ways of presenting themselves. Which is as it should be, because Diversity Is Our Strength(TM).

However, it is here that the ActivityPub-based interactivity hits its limits - for usually, you can either experience the relevant system as it was intended, or you can interact with it, but not both - _unless_ you have an account on the same system (though not necessarily on the same instance).

Let's say that you are a Mastodon user who looks at another person's BookWyrm page. You scroll through their books, posts, and comments. Then you see some comment you want to comment on yourself, but can you do so?

Not directly. You need to figure out the URL of their comment, and then copy and paste that comment into the search bar of your Mastodon instance. Then it will show up in the same format as a Mastodon post, and you can interact with it - boost it, like it, comment on it.

Sure, it works, but it's a whole lot of tedious effort.

Or you can search for the user account in Mastodon and scroll through all their posts and comments as if they were a Mastodon user - and thus, you will miss out on all the unique user interface features of BookWyrm.

So what is missing?

Well, Mastodon already has an "Open original page" feature when looking at someone's post. What we need is an "Open original page AND AUTHENTICATE" feature. This way, the target instance (whatever software they are using) could acknowledge the viewer as an external user who could nevertheless fully interact with the local user interface, including the ability to boost, like, and make comments.

This is something that should be theoretically possible to implement, right?

A Mastodon menu that pops up when clicking on another user's post, showing the options:

"Expand this post
Open original page
Copy link to post"
1
0
0
1
6
0
5

A while back I mentioned the idea of “Fedify Studio”—a web-based toolkit for debugging and development. I've been quietly working on shaping that idea into something more concrete.

Nothing to announce yet, but it's looking like this might become a team effort rather than a solo project, which would be nice. We'll see how it goes.

2
1
0
4

Hey people, I've an ask: If you appreciate all that I do for the fediverse and open social web, and you'd like to see me continue to do that work, please support my work financially.

Right now I'm having to look for work outside of the Fediverse because I simply cannot make ends meet.

I need €60-70k per year to support myself, with costs everywhere feeling increased (so that number may even be too low)

Right now, year to date, I've received a total of €20,170 in financial support from the community, and €22,450 from NLNet grants. I've also only had minimal freelance work this year, as I've been busy on grant work & try to focus on the fediverse & open social web.

So my total income isn't yet enough to be regularly sustainable. I've had problems being able to make rent payments this year because cashflow on grants comes in large chunks usually months after the work has been done.

So if you want to see me keep doing what I'm doing, please support my work!

support.thisismissem.social

1
1
1
5

오이카페 모바일 앱이 출시되었어요! 베타 테스트에 참여해주신 여러분, 오이카페에서 활동해 주시는 여러분 모두 응원해주셔서 감사합니다 🥒📲 🥰

iOS: apps.apple.com/us/app/oeee-caf
Android: play.google.com/store/apps/det

2

Hackers Public @ Seoul 송년회 ---- 2025년의 마지막을 해커들과 함께해요.

Hackers' Public @ Seoul 송년 네트워킹 밋업은 발표보다 대화, 형식보다 연결을 중심으로 진행됩니다. 라이트닝 토크도 지원받습니다. 만들었던 것·배운 것·고민했던 이야기를 자유롭게 얘기해보도록 해요.

많은 관심 부탁드립니다~

21
1
3

Jiwon shared the below article:

GitHub Action Rerunner

초무 @2chanhaeng@hackers.pub

GitHub Action Rerunner는 팀원들이 레포지토리에 대한 직접적인 쓰기 권한 없이도 실패한 GitHub Actions를 재실행할 수 있도록 권한을 위임하는 웹 애플리케이션입니다. 레포지토리 소유자는 개인 및 조직 레포지토리를 등록하고, 암호화된 Personal Access Token을 등록하여 공유 가능한 고유 링크를 생성할 수 있습니다. 팀원은 이 링크를 통해 자신에게 할당된 PR 목록을 확인하고, 실패한 Action을 원클릭으로 재실행할 수 있습니다. Next.js, React, Tailwind CSS, PostgreSQL, Prisma ORM, Octokit 등의 기술 스택을 사용했으며, GitHub OAuth를 통해 안전한 계정 관리를 제공합니다. 이 도구를 사용하면 레포지토리 보안을 유지하면서도 팀원들이 CI/CD 프로세스를 효율적으로 관리할 수 있어 개발 생산성을 향상시킬 수 있습니다.

Read more →
7