Posts by neganeko@ryona.agency
(DIR) Post #AW2JMWYJmx0SFKhKi0 by neganeko@ryona.agency
2023-05-26T04:55:28.924524Z
0 likes, 1 repeats
@7666 > file type or extension blacklist/whitelistdon't you need to go and sniff the file contents itself? probably easier to set paranoid headers for anything that isn't whitelisted and perform file validation for whitelisted stuffquickly devolves into the tired exif debate tho. do you want server code parsing stuff, do you want to inconvenience users, etc
(DIR) Post #AW2NwA0LUx7oYa3WIy by neganeko@ryona.agency
2023-05-26T05:46:44.194347Z
1 likes, 1 repeats
@mint I'm unclear about a few things. XSS or do the nostr lookups go via the local fedi server? because (I think) you could exfiltrate info via the search endpoint and also via /accounts/lookup?acct= with a procgen script on the other side to avoid a bunch of fetch errors in the logspoast already uses an entirely separate subdomain for media so was there a CSP misconfiguration or ... ?
(DIR) Post #AW2O7Sli4gwJwBbEJc by neganeko@ryona.agency
2023-05-26T05:48:46.945365Z
1 likes, 1 repeats
@mint of course you don't even necessarily need that level of sophistication if you grabbed a user's token. you could literally send it in a DM and then attempt to clean up the DM a few seconds later. might not manage to clean it up in time tho
(DIR) Post #AWtqwPp4Zb2bPz2uLg by neganeko@ryona.agency
2023-06-21T00:51:49.246472Z
0 likes, 1 repeats
@neko try this https://bae.st/objects/d545f476-94d2-4cce-891f-b0a660e924bc
(DIR) Post #AX00dmOiZalhCeB30C by neganeko@ryona.agency
2023-06-24T00:08:54.360427Z
0 likes, 1 repeats
@enzymical @DocScranton @PurpCat @neko > 500 mg is 20 pillsnigga how many OTC drugs will kill children if they literally eat a handful of them? there's a reason that shit has childproof capsat 1 g that's 40 pills. if you're that fucking stupid you deserve to diethat being said if you check the toxicology databases people typically start acting erratically, start wandering around in public, get taken to the hospital, start having seizures, generally make a full recovery
(DIR) Post #AX0HmdauN6Mbj7glIe by neganeko@ryona.agency
2023-06-24T03:21:02.157422Z
0 likes, 1 repeats
@enzymical @DocScranton @PurpCat @neko > 50 mg pillswhat why that's silly I'd be cutting those in half I only take 25 mg unless symptoms are really bad> doctordon't need a professional to figure mild allergies out. I don't ask someone before taking ibprofen for minor discomforts either
(DIR) Post #AX0ls4sFN4bAPEJD2e by neganeko@ryona.agency
2023-06-24T08:58:09.331783Z
0 likes, 1 repeats
@enzymical @DocScranton @PurpCat @neko people use it for insomnia here too. a physician could certainly prescribe it ie officially recommend you to take it for that purpose but its sold OTC labeled for that so if you want it you just use itit's not that the visit it too expensive it's that I genuinely don't understand why you would visit for most of the things that you'd use that drug for
(DIR) Post #AX2mJkzFIET59ShVdA by neganeko@ryona.agency
2023-06-25T08:12:35.351558Z
1 likes, 1 repeats
@gray :senkohorror:
(DIR) Post #AX2nugBiCLYqw8hZ2G by neganeko@ryona.agency
2023-06-25T08:30:22.546748Z
0 likes, 1 repeats
@mint :aniwhat:
(DIR) Post #AX2q7Zb0DbcOAGo6FM by neganeko@ryona.agency
2023-06-25T08:55:11.674769Z
1 likes, 1 repeats
@mint @neko :laugh: what is even going on here> used exec to get better error messagesthe fuckI guess the only redeeming detail is that hopefully CAs are trustworthy so hopefully none of them would take advantage of this RCE vuln so hopefully no actual exploits happened in practice... or HiCA sold an exploit service. who knowsscreenshot_2023-06-25_acmesh_hi…screenshot_2023-06-25_acmesh_ex…
(DIR) Post #AX6rLm0YEHV5MQbeG8 by neganeko@ryona.agency
2023-06-27T07:27:50.145381Z
0 likes, 1 repeats
@enzymical > #embed directiveoh shit didn't know about that one. now there's a useful feature
(DIR) Post #AXAzb36QWvV2zLzOim by neganeko@ryona.agency
2023-06-29T07:19:00.198556Z
1 likes, 1 repeats
@mint :laugh: that was hilarious tho SMH no sense of humor
(DIR) Post #AXdxYJDWFUjpN9nBcu by neganeko@ryona.agency
2023-07-13T06:42:10.523066Z
0 likes, 0 repeats
@lamp they finally ran out :blobsmirk:
(DIR) Post #AYmlX0U6xjZaCgJPZQ by neganeko@ryona.agency
2023-08-16T10:28:44.204076Z
0 likes, 0 repeats
@e skill issue
(DIR) Post #AZ7Mcdmnqmp90ZnrFY by neganeko@ryona.agency
2023-08-26T09:01:20.151374Z
2 likes, 0 repeats
@renai @hidden I don't know but this is still her avatar as far as I'm concerned :ablobcatgrumpy:
(DIR) Post #AZTCBxk4ao0mc4lEa8 by neganeko@ryona.agency
2023-09-05T21:49:13.432448Z
2 likes, 0 repeats
@lauralt @coin @Pawlicker @bot @fba @kirby @lina @mint can confirm. he got my butthole pics and now I have to post here at least once a month :blobweary:
(DIR) Post #AZTGciShuZ1GrGeP44 by neganeko@ryona.agency
2023-09-05T21:51:30.188137Z
1 likes, 0 repeats
@e :asui_what:
(DIR) Post #AZyp0DX5fUaMJ1I6DY by neganeko@ryona.agency
2023-09-21T03:57:02.200955Z
1 likes, 0 repeats
@lamp :blobconfused: is it a non-rechargeable battery with a long shelf life or something?
(DIR) Post #AaIvKXCsW6kWv3AjhY by neganeko@ryona.agency
2023-09-30T20:44:10.275044Z
1 likes, 0 repeats
@BlinkRape @LukeAlmighty @matrix @fyw321 A770 seems to be the only reasonable price to get 16 GB right now :senko_sigh:
(DIR) Post #AcWxIUCXcqhqWxSIE4 by neganeko@ryona.agency
2023-12-06T10:57:46.843514Z
1 likes, 0 repeats
@mint @sysrq disoriented? nah refreshedwe're supposed to wake up whenever it is that we're done sleeping. society is what's at fault here