nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq460m49ej0mse92d4kldyxr8q8xdy6pag849rggqqlqp8jmvvksyq89zc9y (nprofile…zc9y)
Here's a #CopyFail PoC to manipulate files that are readable from the container: https://infosec.exchange/@mttaggart/116495935493915475
That sounds like a very small attack window, not sure how much work will be needed to blindly change relevant host binaries.
nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq7yf7cxzxz4kwf24zmflvyqqtrylsjwm5q9a074u5ger57rmzz0aqe544dh (nprofile…44dh)
Ge0rG
npub1tp…wxw26
2026-05-01 10:11:41 UTC
in reply to nevent1q…tt3x
Author Public Key
npub1tpmalgm5ssjtqq7rancvdk0m8hwd5z5ts67tg4p46raqjtxgw0qqzwxw26Seen on
wss://relay.ditto.pubPublished at
2026-05-01 10:11:41 UTCEvent JSON
{
"id": "a4bdd5c8b338c126c4b26e6c5997c794f703466bed5a1f2c70c3e942919c7a43",
"pubkey": "5877dfa3748424b003c3ecf0c6d9fb3ddcda0a8b86bcb45435d0fa092cc873c0",
"created_at": 1777630301,
"kind": 1,
"tags": [
[
"p",
"ae9fba97327ee192a9b5b7da430ce0399a4d07a83d4a342000f802796d8cb408",
"wss://relay.ditto.pub"
],
[
"p",
"f113ec1846156ce4aaa2da7ec2000b193f093b74017aff579446474f0f6213fa",
"wss://relay.ditto.pub"
],
[
"p",
"5fced8b59b1254415475dd3fdcb3ba169f5cafa3283370a2fcd03701c4265fbd",
"wss://relay.ditto.pub"
],
[
"p",
"3ba412ac4b14c4b37cd6ed16b9d262ad4ffefb05c5b6c6b3e15e381471b1221a",
"wss://relay.ditto.pub"
],
[
"e",
"248e6b5ea2dab31cb3ea033322bf3dd0c5ba05cce5276031d3d1075f8a886688",
"wss://relay.ditto.pub",
"reply"
],
[
"t",
"copyfail"
],
[
"proxy",
"https://chaos.social/users/ge0rg/statuses/116498779461515533",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq460m49ej0mse92d4kldyxr8q8xdy6pag849rggqqlqp8jmvvksyq89zc9y\nHere's a #CopyFail PoC to manipulate files that are readable from the container: https://infosec.exchange/@mttaggart/116495935493915475\n\nThat sounds like a very small attack window, not sure how much work will be needed to blindly change relevant host binaries.\n\nnostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq7yf7cxzxz4kwf24zmflvyqqtrylsjwm5q9a074u5ger57rmzz0aqe544dh",
"sig": "5f5c124f067397a98b566a2544d7042c2a812957c162bd8442420be473d19083ab5cfd3a5c032fae52649ddb25ffce1ee85b8d73019dba50f12d923676ffcb06"
}