posted back in march #trendsetter

do yall like security vulns? here's a totally invisible csp bypass -> xss -> rce exploit chain in [redacted] :3

69 followers, 69 following, and the 69th post posted at 4:20. it has completed bluesky and will never post again now o7

68

67

Lady Knight Sketch

someone: how does this work? me: it's like... uh... wait. I need to send an email to security@

hey @str4d.xyz what's your preferred way to report vulnerabilities in rage? the github security thingy isn't set up on the rage repo

does this app like cursed nix content? ``` {pkgs, lib, ...}: let run = lib.mapAttrs (k: lib.getExe) pkgs; in '' # these are all the same: ${pkgs.nu}/bin/nushell ${lib.getExe pkgs.nu} ${run.nu} '' ```

gay sex

frotting tonight queen? 🥰

the Thing really wants me to post this. i guess this is my uid

this really eggs the bug

i guess i should now also start posting non-exploit-payloads here now lol

i have not used this place in like a year and my notifications consist of 4 notifications so if you tried to reach out to me, try again

hi chat

buesky

javasjavascript:cript:alert(1) is a cooler website vbs

help2

test

test 3

test

test 2

has bluesky fixed the thing where you can't use your domain? we will find out in a second

bsky in a nutshell

okay who the fuck came up with the great idea to add a UI on prod that does nothing and gives you a mysterious error message?

love it when that happens