its so cold im using chrome instead of firefox to read news on my phone cuz i need the ads to warm up my phone and hands

wild how my shitpost has already hit news coverage, i just wish my high effort projects got the same treatment xD www.gamespew.com/2026/01/flap... 9to5google.com/2026/01/03/f...

i made a flappy bird clone that uses your folding phone as the controller

wait, I CAN SEND THEM TOO.?.???

what the fuck? yt comments have voice messages now???

she just straight up stole me off the stage 😭 #39c3

The recording for my talk is out now! You can watch "CSS Clicker Training: Making games in a 'styling' language" in English, German, and Latvian at media.ccc.de/v/39c3-css-c...

thank you all for attending my #39c3 talk! for now you can check the relive, but i'll share the recording link once it's out

thank you all for attending my #39c3 talk! for now you can check the relive, but i'll share the recording link once it's out

my css talk, just an hour away! (hall ground, 9:05pm)

If you'd like to find me at #39C3, check the pinned post on my fedi! infosec.exchange/@rebane2001/...

and i've finished the slides for my #39c3 talk on sunday! fun trivia some of you may already know is that i wrote my own slides editor where i write all my slides in html/css to have more flexibility over animations and visualizations than what google slides offered i'm so exited!!

i made it!

CSS-only livesplit recreation (made in ~45 min) lyra.horse/fun/livecssp...

imo the css relative color syntax should support an alpha-only shorthand as in, instead of writing: rgb(from var(--foo) r g b / 0.5) you could write: rgb(from var(--foo) / 0.5)

Here is my writeup of Intigriti's December XSS challenge. It consisted of 6 smaller challenges combining into a big 1-click exploit. One of the most fun ones I've ever played. Loved the unique format by @renwax23.bsky.social! jorianwoltjer.com/blog/p/ctf/i...

i would like to know who thought this was a good idea

*SUNDAY

i think my talk will also be interpreted into german which is gonna be pretty fun to hear later

Minge persse ja mitte ühelgi võõral ei ole vaja mulle helistada. Tehke siis telefonivõrgud turvaliseks sedasi, et kui helistab politsei, kuvab telo POLITSEI ja et seda võltsida ei saaks. www.err.ee/1609891156/p...

my #39C3 talk's at 21:05 on saturday in the ground room! i'm still working on the slides, so if you have any CSS crimes or techniques you'd like to see explained please let me know! it can be both cohost and general CSS crimes & stuff! see you there!!

i wish timers let you set an end time instead of a duration AND I DO NOT MEAN AN ALARM CLOCK I WANT A TIMER

people who don't consider something a programming language because it's too "hacky" probably forgot that computers are just a pile of sand somehow made to do math in the first place

omg they renamed the fruity-bussi to fruity-fruits 😭😭

i love you, but this comparison is diabolical lmfao

checked my purchase history on the gaycard

huh, airbaltic no longer allows you to use power banks on their flights at all

🔥 Remember Internet Explorer’s Page Transitions? THEY’RE BACK BABY! 👾 Demo: ie-page-transitions.netlify.app ⌨ Repo: github.com/bramus/ie-pa... To configure these, use the meta tags from the olden days + load up the library. Works in IE 5.5–7.0, Chrome 126+, and Safari 18.2 (buggy).

🎉 CSS Wrapped 2025 is here! Once again, it has been an AMAZING year for CSS and UI. Go check out chrome.dev/css-wrapped-... to see all CSS/UI features Chrome shipped this year. Each features comes with a small explanation and demo for you to play with.

we released a game today! store.steampowered.com/app/774181/R...

cmsn for @rebane2001.bsky.social Thank you very much!

calling svgs an attack vector is a diabolical pun

Developer attempts to replicate "Liquid Glass" in CSS, and once finished realizes what she'd actually created is an exploit for a fundamental, previously unknown, and rather serious browser vulnerability lyra.horse/blog/2025/12... "CSS hack accidentally becomes regular hack"

Firefox nightly introduces the setHTML() method. Which is like a native DOMPurify. You can easily test it here: portswigger-labs.net/mxss/ Set HTMLSanitizer ✅ Auto update ✅ I'm trying to break it, I encourage you to break it too

for a moment i was considering naming the attack SVGjacking (pronounced swag-jacking), but figured having a concise and clear name was more important

my new blogpost is out!! this one talks about a new web vulnerability class i discovered that allows for complex interactive cross-origin attacks and data exfiltration and i've already used it to get a google docs bounty ^^ have fun <3 lyra.horse/blog/2025/12...

>finds a nice view >takes out laptop with vscode open >takes a photo >posts on social media >"what's stopping you from coding like this" >puts laptop away >doesn't actually code like this

the estonian government just fired out this emergency alert for some reason, unprompted?? good to know my alerts bot (t.me/ee_alert) works correctly though

oh..

did u know the 'qr' in qr codes is pronounced as 'queer'

would u believe this queer made a qr code generator inside an svg filter

One of my favorite things is getting to tell friends who are new to NYC that the subway "stand clear of the closing doors please" voice is a trans woman named Bernie Wagenblast and she's amazing.

A great, practical article teaching you about the newer sibling-index() and sibling-count() functions in CSS. frontendmasters.com/blog/stagger...

now that i'm out of it, fuck GenderGP. they take advantage of trans people who don't have another choice or don't know any better. they're overpriced, bad at communicating, and often misprescribe you. if you can, just go for diy instead!!

The Wayback Machine, openlibrary.org, and some other archive.org functions are offline because some network gear has failed. We apologize and are working on it. More as it happens.

pretty fun stuff in here :) hackaday.com/2025/11/18/c...

at the bog ૮ ˆ ﻌ ˆ ა

my website still up hell yeah, i knew writing everything in css and running it on a random nginx box was a good idea

rare