xianc78 @xianc78@gameliberty.club

I'm writing perhaps the most controversial shit I've said online: an article about nerd fantasies, "freetards", and postmarketOS.

Live footage of our government trying desperately to hold on to even a shred of its reputation:

@graf I'm paranoid now. So I need to understand what really happened before I do something like, add Nostr keys into Soapbox browser storage.

I still don't know how the script closing tag is somehow used as an opening tag. But this confirms at least that there are serious problems in Pleroma FE's html parser. There's just a tiny missing piece I haven't found.

Pleroma on the backend is also at fault for not sanitizing it correctly. I was able to confirm that DOMPurify (in TypeScript) does the right thing. So in case anyone thinks I'm crazy for writing a TypeScript backend, this is why.

@xianc78 someone was suggesting it may be, yes. i know the IRS did something like this years ago by making it so you can't float holiday pay an that's why every country in the USA simultaneously abolished rolling over vacation days

Notice how the script tag is being parsed as a child of the `a` element

Pleroma FE is still vulnerable to XSS

the "bomb threat" dialog in the media is transparently garbage because anybody can make all the fake bomb threats they want whenever you talk about something, to make it look like people supporting you are doing it. NBC knows this and are running their story anyway because they are disreputable.

Interesting that the USA government is spending money to develop smartphone identification/government access mobile apps in other countries like Ukraine, but not here.

Is it a trial run?

New nostr id
npub1y5a3pgwrm76ekyt8gu2scl6l68av4hpzzrc7e657wjjrydepssasq2scaw

@LukeAlmighty it is exceedingly important to fill a child's mind with information that will set them up for a good future. I have a feeling that gen alpha will grow up to absolutely resent how poorly they were treated.