xianc78 @xianc78@gameliberty.club

When building a truly new technology, it's impossible for a designer to design something around it until a developer has implemented it first.

81% done now! That's what, a week since 76%? Seems like it's going well!

I'm looking forward to dicking around with the code a bit lol. Nothing serious, just wanna' poke around.

https://github.com/sonicdcer/sf64

I'm writing perhaps the most controversial shit I've said online: an article about nerd fantasies, "freetards", and postmarketOS.

Live footage of our government trying desperately to hold on to even a shred of its reputation:

@graf I'm paranoid now. So I need to understand what really happened before I do something like, add Nostr keys into Soapbox browser storage.

I still don't know how the script closing tag is somehow used as an opening tag. But this confirms at least that there are serious problems in Pleroma FE's html parser. There's just a tiny missing piece I haven't found.

Pleroma on the backend is also at fault for not sanitizing it correctly. I was able to confirm that DOMPurify (in TypeScript) does the right thing. So in case anyone thinks I'm crazy for writing a TypeScript backend, this is why.

@xianc78 someone was suggesting it may be, yes. i know the IRS did something like this years ago by making it so you can't float holiday pay an that's why every country in the USA simultaneously abolished rolling over vacation days

Notice how the script tag is being parsed as a child of the `a` element

Pleroma FE is still vulnerable to XSS

the "bomb threat" dialog in the media is transparently garbage because anybody can make all the fake bomb threats they want whenever you talk about something, to make it look like people supporting you are doing it. NBC knows this and are running their story anyway because they are disreputable.