Remote
Rebane
@rebane2001@infosec.exchange
mastodon 4.8.0-alpha.3+glitch🇪🇪🏳️⚧️ | Archivist | 13 CVEs in Chrome | MapartCraft | Horse | rebane2001#3716 | Lyra 🦊
2754 Followers
201 Following
50 Posts
Joined December 16, 2022
My Cool Website:
pronoun:
she/it
crazy find in gmail source code
i was suggested to do a #40c3 talk about qr codes, is that something y'all would actually be interested in watching?
uhh this makes me more worried not less
Replying to
i think they *know* cuz they specifically removed it here
i
This must be what it feels like to be European!
yay, my 13th (14th?) chrome cve!!
https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html
wikipedia speedrun but its clicking through 88x31s
WHY IS indexedDB.cmp(a, b) THE METHOD TO COMPARE TWO Uint8ArrayS IN JAVASCRIPT ????
its kind of crazy how
document.getElementById("foo")
and
document.querySelector("#foo")
are the same length
dompurify is so annoying like i have multiple bugs that almost bypass but are stopped by just how many precautions it takes aaaaaaa
Replying to
these days i give up and just use object-fit: contain cuz its good enough
bold
also bold
also bold
also bold↖
got trolled by quirks mode
Replying to
@sosquqer@en.osm.town @thomholwerda@exquisite.social its hard to tell what's going on exactly (not the most documented code ever) but i hope its not slop
interestingly enough its licensed under CC BY-NC-SA 4.0 in the name of an estonian company, with an email for commercial licensing?
i really hope its a passion project and not some slop to promote a company, no clue which one it is atm
i've been posting too many code snippets recently and i don't know how to stop
another funny:
hi
alert(o.innerHTML);
(o.o).remove();
alert(o.innerHTML);
Replying to
to be clear im asking you to send the imessage itself, not a link to my video
Replying to
@jstsmthrgk@social.jstsmthrgk.eu ÌVWUå~
1Û;^ |]_^ÃvCëíVUåv<uì]^ÃVÿÆÄëéVWUåv¿'¹
9÷
ÿu
ì]_^Ã÷ùëë÷ÿÖ0Pÿ¹
÷ùÄëÕVWUå ¸æPèÿ°0Pÿ° PFþÿ²1RÿFþPÿÄ
¾
¿~þø¹
÷ù
Àt
0PÿÄø¹
÷ùÂ0Rÿ° PÿFþø~þÄNuì]_^Ãë¼VWUå 1ÿÇFü¸¾)þëFþ° Pÿ° PÿFþ@Ä9ð|ä1ö
ötO
ÿtKE)ð÷fü÷þFü° Pÿ° Pÿ° PÿFü0PÿFÄ9þ~ð
PÿGÄÿuì]_^ÃÇFüë¼VWUå ¸$PèþÄÇFü1öë9Ç!ÿ Àt+Ç!Fÿ² RVþÿFÿPÿVþRÿFÄþu°
PÿÄ¿þ
ÿ:
éu,°PÿÒÄGÿuä°
PÿÄ
öt,¸PèþÄì]_^Ã
Replying to
@anthropy@mastodon.derg.nz @techokami@woof.tech x86css was fully written by hand in sublime text with no ai whatsoever
i usually work with a private git repo or no source control until a project is done and then put it in a public repo because it makes it easier for me to work on stuff
i'm happy to answer any questions you may have but reading the code should make it pretty obvious it's human-written and soulfully flawed
any cool queer stuff to check out in stockholm today?
Replying to
@sk@catcatnya.com@property --t {
syntax: '';
inherits: true;
initial-value: 0;
}
html {
background: #44565F;
transition: 7700s linear --t;
--t:100000;
@starting-style{--t:0}
a {
--s:calc(sibling-index() - 1);
--x:calc(round(down,var(--s)/12) + 6);
--y:calc(mod(var(--s),12) + 3);
--z:calc(var(--x) + var(--y) - var(--t));
--r:sin(var(--z));
scale:3;
position:fixed;
top:calc((var(--y)*16 + var(--r))*1px);
left:calc((var(--x)*16 + cos(var(--z)))*1px);
color:hsl(0 calc(198*max(1 - min(1, abs(var(--x) - 14.5)),1 - min(1, abs(var(--y) - 8.5)))) calc(70 - var(--r)*8));
&::after{content:"•"}
}
}
Replying to
@sk@catcatnya.com this is currently chrome-only due to sibling-index(), but if you manually assigned the --s values for every tag it should work in firefox too
Replying to
@Wolkensteine@mastodon.wolkenheim.eu Unrelated to my original issue, but how much slower is Librewolf in your experience? I've been considering switching to it, and I'm a somewhat heavy browser user (tens of windows/hundreds of tabs), but I also have fairly well-specced computers, so I wonder if I'd notice the difference.
Replying to
@leeloo@c.im okay fine, do it with a cache bust
first you visit example.com/?a
then you disconnect from the internet
then you visit example.com/?b
if you want the second visit to show anything offline you need service workers
Replying to
@leeloo@c.im define a web app - in this context i just mean a website with application-like utility, not a pwa
Replying to
@leeloo@c.im you're acting obtuse, claiming that service workers are malware or something while clearly not understanding what they were designed to do and what they are, idk im gonna stop responding because you're not arguing in good faith at this point
Replying to
@leeloo@c.im im just trying to answer your questions
okay so what im trying to get at:
- you have a webapp (which is just a website, you do not install anything) at example.com
- you visit said page and then close it
- you lose internet connectivity and visit example.com again
- the page still loads
this is what you need service workers for
Replying to
@leeloo@c.im you don't need javascript to implement interactivity and logic, it doesn't really matter here
Replying to
@leeloo@c.im what if you close your browser, open it up later, and visit the url again? how do you make it work then
Replying to
@leeloo@c.im like mastodon, for example. it's a webapp because it has application-like functionality, as opposed to being a static website.
Replying to
@leeloo@c.im how are you loading a page without an internet connection and without using service workers? afaik you need service workers for that
also, service workers aren't supposed to be able to just run in the background, this is literally what the vulnerability in my post is about
Replying to
@leeloo@c.im you were the one asking me what a webapp is?
yes you do need js to use a service worker
Replying to
@leeloo@c.im service workers are pretty useful? i think one of the main uses is making webapps work offline, which is pretty nice sometimes