Conversation

Notices

1. Natty :butterflyN: (natty@astolfo.social)'s status on Friday, 26-May-2023 21:32:02 JST Natty :butterflyN:

   Can someone enlighten me on the Akkoma/Pleroma bug?

   •  (mint@ryona.agency)'s status on Friday, 26-May-2023 21:31:59 JST 

     in reply to

     • Proud owner of a potato sack :flag:
     • :archlinux: :nyarch: :verified:
     @lewdthewides @natty @hj It was just a convenient way to obscure the token, the code masked it to make it look like one of those long-ass Nostr usernames.
   • :archlinux: :nyarch: :verified: (lewdthewides@hidamari.apartments)'s status on Friday, 26-May-2023 21:32:00 JST :archlinux: :nyarch: :verified:

     in reply to

     • Proud owner of a potato sack :flag:
     @hj @natty so this has nothing to do with the nostr bridge?
   • Proud owner of a potato sack :flag: (hj@shigusegubu.club)'s status on Friday, 26-May-2023 21:32:01 JST Proud owner of a potato sack :flag:

     in reply to
     @natty someone uploaded js file, then uploaded svg file that referenced that js file and tricked someone to opening it in their browser
   • :archlinux: :nyarch: :verified: (lewdthewides@hidamari.apartments)'s status on Friday, 26-May-2023 21:33:21 JST :archlinux: :nyarch: :verified:

     in reply to

     • Proud owner of a potato sack :flag:
     @hj @natty I see. Thanks, alex
   •  (mint@ryona.agency)'s status on Friday, 26-May-2023 21:33:21 JST 

     in reply to

     • Proud owner of a potato sack :flag:
     • :archlinux: :nyarch: :verified:
     @lewdthewides @natty @hj That wasn't even his bridge, assuming it actually operated as you'd expect.
   • Proud owner of a potato sack :flag: (hj@shigusegubu.club)'s status on Friday, 26-May-2023 21:33:22 JST Proud owner of a potato sack :flag:

     in reply to

     • :archlinux: :nyarch: :verified:
     @lewdthewides @natty my guess is nostr bridge was just a part of the social engineering scheme