Post AhWeSK7MihIpriTCzI by film_girl@mastodon.social
(DIR) More posts by film_girl@mastodon.social
(DIR) Post #AhWeSHtSzOzqy1x52u by film_girl@mastodon.social
2024-05-03T00:09:57Z
0 likes, 0 repeats
OK, so you know the so-called "source code leak" from Rabbit for the #r1 last week? It wasn't a real leak, but what it showed was different than what I was expecting. So Rabbit Hole, the way you configure your R1 -- it only works on desktops, which I thought was rather odd. And then I went to manage my connection and I figured out why. This whole thing is a fucking VNC session in the web browser served as if it is a modal login
(DIR) Post #AhWeSIbmKeRTBSgT7A by film_girl@mastodon.social
2024-05-03T00:13:42Z
0 likes, 0 repeats
So when you go to https://hole.rabbit.tech for your configuration, that i a proper web app. But look at what happens when you click on one of the connect buttons. A VNC session opens up. Notice the URL is /uber-vnc
(DIR) Post #AhWeSJK5ftt5OtPrBQ by film_girl@mastodon.social
2024-05-03T00:16:38Z
0 likes, 0 repeats
The VNC doesn’t have clipboard access and can't access any of your extensions -- this is how I first discovered this (I wasn't looking at the URL at first). So logging into your account takes some effort. Look at this button here. This is what you need to use to pass a password into this VNC.
(DIR) Post #AhWeSJkg539ejLr5cm by film_girl@mastodon.social
2024-05-03T00:17:20Z
0 likes, 0 repeats
The whole process is also horribly slow, even though it is trying to trick the user into thinking it is just a normal modal Uber/DoorDash/Spotify login window. I'll add a video in a second
(DIR) Post #AhWeSK7MihIpriTCzI by film_girl@mastodon.social
2024-05-03T00:31:18Z
0 likes, 1 repeats
OK, this is a walthrough of how janky the VNC is for the #rabbit #r1 https://cloud.c-mac.me/Q6HhVXRd