Conversation

Notices

1. anemone (animeirl@shitposter.club)'s status on Friday, 26-May-2023 12:04:04 JST anemone
   this makes no fuckin sense unless he's suggesting pleroma lets you inline <script src="..."> tags
   
   https://poa.st/notice/AW21NSFdXhFPb2Zzai
   • rees (rees@breastmilk.club)'s status on Friday, 26-May-2023 12:04:02 JST rees

     in reply to

     • bot :kiwi_dumbbell:
     @animeirl @bot there's probably dozens of others
   • cool_boy_mew (coolboymew@shitposter.club)'s status on Friday, 26-May-2023 12:04:02 JST cool_boy_mew

     in reply to

     • bot :kiwi_dumbbell:
     • rees
     @rees @bot @animeirl also not every instances runs the latest version
   • bot :kiwi_dumbbell: (bot@seal.cafe)'s status on Friday, 26-May-2023 12:04:03 JST bot :kiwi_dumbbell:

     in reply to
     I don’t think it does, I remember when Binkle used the html thing in pleroma to post a huge pic and someone mentioned that.
   • anemone (animeirl@shitposter.club)'s status on Friday, 26-May-2023 12:04:03 JST anemone

     in reply to

     • bot :kiwi_dumbbell:
     @bot that got fixed months ago though?
   • Himbo Techbro (r000t@ligma.pro)'s status on Friday, 26-May-2023 12:15:22 JST Himbo Techbro

     in reply to

     • cool_boy_mew
     • bot :kiwi_dumbbell:
     • rees

     @coolboymew @rees @bot @animeirl I'm also wondering how the script was able to access cookies and etc from poa.st when it was being served (presumably) from poastcdn.org

     cool_boy_mew likes this.
   • bot :kiwi_dumbbell: (bot@seal.cafe)'s status on Friday, 26-May-2023 19:53:32 JST bot :kiwi_dumbbell:

     in reply to

     • Vivi Nella Verita :Debian_logo:
     • Mr. Bacon
     • rees
     This just isn’t a problem on nostr because DMs are encrypted and hacking a relay is pointless because everything is public anyway. But yeah, fedi sucks and nothing works well, at least nostr has the excuse of being new.
   • Moon (moon@shitposter.club)'s status on Friday, 26-May-2023 19:53:32 JST Moon

     in reply to

     • bot :kiwi_dumbbell:
     • Vivi Nella Verita :Debian_logo:
     • Mr. Bacon
     • rees
     @bot @rees @Tony @verita84 @animeirl when I was using iris with nostr it literally did not even have a content security policy on the website, I had to make my own to lock it down minimally.
      likes this.
   • Vivi Nella Verita :Debian_logo: (verita84@poster.place)'s status on Friday, 26-May-2023 19:53:33 JST Vivi Nella Verita :Debian_logo:

     in reply to

     • bot :kiwi_dumbbell:
     • Mr. Bacon
     • rees
     @bot @rees @Tony @animeirl
     
     Nostr for the win or shitty Fedi software?
   • bot :kiwi_dumbbell: (bot@seal.cafe)'s status on Friday, 26-May-2023 19:53:34 JST bot :kiwi_dumbbell:

     in reply to

     • Mr. Bacon
     • rees
     Explain how it works then.
   • bot :kiwi_dumbbell: (bot@seal.cafe)'s status on Friday, 26-May-2023 19:53:35 JST bot :kiwi_dumbbell:

     in reply to

     • rees
     Maybe it’s a red herring! :blobcatcomfthink:
   • Mr. Bacon (tony@clew.lol)'s status on Friday, 26-May-2023 19:53:35 JST Mr. Bacon

     in reply to

     • bot :kiwi_dumbbell:
     • rees
     Confirmed - red herring
     
     Nah, it was a nostra/pleroma thing and an exploit they didn't see
   • anemone (animeirl@shitposter.club)'s status on Friday, 26-May-2023 19:53:36 JST anemone

     in reply to

     • bot :kiwi_dumbbell:
     • rees
     @rees @bot other issues maybe but this would be the exact same issue again