lexi

On dirait que j'ai perdu mon follower bsky préféré.

ok the followers arent accurate anymore but the rest fits

image of obama with the text "economy" overlayed and a blue coloured arrow trending down

@counter-strike.net

posted back in march #trendsetter

do yall like security vulns? here's a totally invisible csp bypass -> xss -> rce exploit chain in [redacted] :3

fun fact! this (and a few other funny shenanigans) has been known since 2023, see an old proof of concept here lol (note how the link says "jav...ler" (and breaks in the middle), the preview is google, the card says its from "javascript:alert(1)" and the link is about:blank) bsky.app/profile/lexi...

wait. no it isnt?? it still exists but apparently not everywhere??? bsky.app/profile/lexi...

lmfao the original post was deleted. didn't even get an email or anything, just discovered that it was nuked

69 followers, 69 following, and the 69th post posted at 4:20. it has completed bluesky and will never post again now o7

67

Lady Knight Sketch

someone: how does this work?

me: it's like... uh... wait. I need to send an email to security@

hey @str4d.xyz what's your preferred way to report vulnerabilities in rage? the github security thingy isn't set up on the rage repo

> no markdown formatting
> 280 char limit

what is this, twitter?

does this app like cursed nix content?

```
{pkgs, lib, ...}: let
run = lib.mapAttrs (k: lib.getExe) pkgs;
in '' # these are all the same:
${pkgs.nu}/bin/nushell
${lib.getExe pkgs.nu}
${run.nu}
''
```

this post was typed by a Genuine Yubico® YubiKey™ Series 5 USB-C device

gay sex

frotting tonight queen? 🥰

what the fuck its actually still doing the thing who thought this was a good idea

A virtual certificate with text "Celebrating 10M users on Bluesky, #152,447, lexi ‪@lexi.re‬, joined on Jun 23, 2023"

the Thing really wants me to post this. i guess this is my uid

this really eggs the bug

i guess i should now also start posting non-exploit-payloads here now lol

i have not used this place in like a year and my notifications consist of 4 notifications so if you tried to reach out to me, try again

hi chat

i barely even use this website but im glad past me has broken some algorithm in the future

buesky

yesn't, they do in some places, but with the right api call you can get them