Posts
22323
Following
432
Followers
831
25. θΔδ*& *NIX Developer.Average Paw Enjoyer. ♿ HSD

lotte adds rac- to words a lot but it doesn’t alter meaning

NSFW posts are not for minors (they will be blocked on sight).

Opinions expressed in this profile are representative of those of your employer.

“u are my favorite therianizing biohazard” — @sodiboo@gaysex.cloud
“you know, maybe i will finally learn to read the content warning before clicking 'view' [—] thanks for this lesson @charlotte” — @ariadne@social.treehouse.systems

pfp by blobworkerq

okay since sometimes it would use a trusted certificate

https://you-have-a.problem.chir.rs/

1
0
0

Charlotte lotteheartplural/Cinny cinny_heart_plural thetadelta ursaminor treblesand

making a website that tests embed services if they still trust emudhra

1
0
1
re: US Pol
Show content

@Mendie_Taoma yeah it’s a reference to that

because C memory vulnerabilities, too, are as predictable as they are preventible

0
0
1

@Mendie_Taoma the onion has to go undergo maintenance because c is the only language where this happens regularly

1
0
0

“no way to prevent this”, says only language where this happens regularly

2
0
1

@EeveeEuphoria web development is a lot like a horse,

1
0
1
PHP (private horse protocol)
1
1
0

Charlotte lotteheartplural/Cinny cinny_heart_plural thetadelta ursaminor treblesand

happy weewoo

2
0
0

Charlotte lotteheartplural/Cinny cinny_heart_plural thetadelta ursaminor treblesand

the world if iocaine was normal instead of wasting resources poisoning opengraph embeds

0
0
1

ira grachevskaya from the hit vn Z.A.T.O. // I Love the World and Everything In It

do you have any trust in eMudhra after the 4 incident? glad that at least the RSA certificates were safe?

fear not, here's a complete bypass of their 1fa otp login system. they encrypt OTPs to a public key and issue those behind cloudflare turnstile. this key to be precise:

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/OR1az+yTKt1ZONkk+T
owML34smGCo8evpk4zLCsrc+LXtX20yERombX4xh2Sd3VDFML2LuOavB3PwGFfL0
Qr+gGPomq23nqaX9nr5SeSTpFbrxsEEVdipXXpucTFFhnzye7Y7ZodHNQSjUqQPu
L6ktk/YkP0B6k5lIMT//W/4gB3yU1UGCLcSvdMQJo5+I7OdIGxQbir4rtXpdm8qP
3pblFPJXcHc2urBHvJvatUpq/rY0Km4Cxz5ZJwM7MW/hxSRpiTXNoE58W8DHEQVq
ln7RDh0Cc7lA0Qvm92NJIohbi4KZzmq81UA2MyHwyxtkykQxRFO1gEU5i/dp/I5D
ZQIDAQAB
-----END PUBLIC KEY-----

would be a real shame if you can just take that key and """sign""" (encrypt) otp requests yourself :^)

3
12
1

@puniko in the same tone as “arbeitszeitbetrug”: “datenhehlerei”

0
0
0
2
18
3

Charlotte lotteheartplural/Cinny cinny_heart_plural thetadelta ursaminor treblesand

“no way to prevent this”, says only language where this happens regularly

1
1
4

If you are interested in poking at traffic generated by IoT devices, today would be a good day to ensure that automatic firmware updates are turned off

In other news PHP is FUCKED TURN OFF PUBLIC FACING PHP APPLICATIONS BAD BAD BAD

1
2
1
Show older