Community Service Hour

Bring the work. Get it argued with, live.

Every Tuesday, one hour. Bring a change and take the floor, or listen while someone else does. The reaction is live: design, implementation, and whether it is correct.

This is for you if…

You can produce a draft, and still cannot tell if it is right. A model will write the code. It will not defend the design on a live call.

You do not yet know a correct change from a wrong one. A first pull request is a rep. It is not a portfolio.

You would rather watch the argument than read a tutorial. The episodes are the worked example.

How it works

1
Make a change

A typo fix, a small pull request, or the thing you are building. Bring a diff.

2
Show up, or listen

One hour, live. In the ring, the work goes on the table. In the audience, you watch that hour.

3
Get it argued with

Design, implementation, and whether it is correct. Early is fine. Unchecked is not.

4
Leave a record

The episode, the notes, and the participant page are the proof it was looked at.

Never landed a correct change before? Start there.

Create a GitHub profile. Pick a project you can actually read, including this site. Make the smallest correct change and open a pull request. Then bring the diff to the call. You will get a reaction, not a medal for having a profile.

Recent hours

Pannellum Zero Day
XSS on trusted domains
Photo of fulldecent Photo of Doc72_ Photo of pwncmd +1

A flaw in Pannellum 2.5.6 let attacker-controlled panorama configs run script on trusted domains. We trace the NPS and CNN examples, investigate urlscan.io and attacker infrastructure, and examine the risks of session theft and search cloaking, plus the fix in 2.5.7.

Polymarket bot
Machine learning and data flow for prediction-market trading
Photo of aiphilly_ Photo of kbadinger Photo of fulldecent +1

A trading bot, torn down: order book, DuckDB, and whether the backtest is real.

Physically unclonable
with Unclonix
Photo of unclonix Photo of fulldecent Photo of MSandomirskii

Particle patterns against a copied QR code, with Unclonix.

T+0 settlement
Why instant settlement changes markets
Photo of fulldecent

What breaks when a trade clears in the same block.

All episodes…

People who took the floor. 149+

@Gauthier_Z @Sergeinca @fortifiedyourmd @ZainanZhou @GraceDePIN

All participants…

The call is free. Bring a change, or listen to one get torn down.

Monthly email

Recaps of the live hour, the change that got argued with, and the next call.

  • What was on the table
  • The cut, and why
  • The next hour