Rebane

Public Key

npub1d9mts2hhu2jx5kzmvapmpdtlzzvh3ppgfqe777uanflz5sw9ruqqrxm606

NIP-05 Address

rebane2001@infosec-exchange.mostr.pub

Profile Code

nprofile1qqsxja4c9tm79fr2tpdkwsask4l3pxtcss5ysvl00wwe5l32g8z37qqpz4mhxue69uhhyetvv9ujuerfw36x7tnsw43qzzgxqz

Publishing to

relay.ditto.pub

Author Public Key

npub1d9mts2hhu2jx5kzmvapmpdtlzzvh3ppgfqe777uanflz5sw9ruqqrxm606

Show more details

Last Notes

2026-10-29 12:54:19 UTC

ive always loved how the 3ds lights form a pretty gradient on low battery
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/524/294/356/085/079/original/e22016cb7ff49c03.jpg

2026-10-28 10:29:06 UTC

following up on my previous post
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/518/012/966/664/954/original/5a07b5787b411844.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/518/013/135/615/833/original/bc60f6e88039af8b.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/518/013/326/663/536/original/655fa00c56469225.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/518/013/463/222/020/original/701781e9f284d848.png

2026-10-26 21:48:07 UTC

the hardest problem in computer science is getting a file from one computer to another

2026-10-23 11:49:43 UTC

wtf i just learned that you can middle-click the back/forward buttons in browsers
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/490/064/631/891/121/original/1f660f04dc341068.mp4

2026-10-23 08:37:55 UTC

whenevr queers ask for my whatsapp
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/489/304/335/556/001/original/29371082fab620c9.png

2026-10-23 05:57:44 UTC

god it'd be so funny if 4 permabroke containment and became the new 67

2026-10-17 16:43:02 UTC

why are hotel showers always designed to get the entire bathroom wet??

2026-10-08 21:39:12 UTC

trying to get this score as low as possible
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/407/435/274/802/285/original/ddc63bd2652d3b78.png

2026-10-07 22:30:46 UTC

chat are we installing OSName?
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/401/979/679/010/243/original/c9126a2ed2483c3b.jpg

2026-10-01 18:38:08 UTC

https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/367/104/262/298/303/original/3a8f81f4c1f6ac4b.jpg

2026-09-27 23:48:11 UTC

this old pic of me with a trans looking aurora kinda fucks
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/345/665/516/592/893/original/facf4b959bccc002.jpg

2026-09-25 09:41:57 UTC

Introducing 𝙷𝚊𝚠𝚔𝚃𝚞𝚊𝚑𝙱𝚛𝚘𝚠𝚜𝚎𝚛.𝚎𝚡𝚎
- 15 KB native web browser
- 6 MB of RAM for the host
- 0 lines of Visual Basic (no C# cuz idk how to write it)
- no URL bar because surfing through 88x31s is more fun
- title bar kept cuz then u can close it and minimize buttons
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/331/019/681/363/197/original/46148e59441a11ba.png

2026-09-25 09:13:32 UTC

crazy find in gmail source code
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/330/888/671/454/184/original/1d44bfc488911029.png

2026-09-23 10:50:20 UTC

did you know? the ❌ on the cloudflare error page is not symmetric!
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/319/959/681/954/545/original/eaf405afd1fcfbea.mp4

2026-09-20 08:09:06 UTC

i've begun to prefer "content note" over "content warning" because the former feels more acceptable to use for things that might not "qualify" for a warning

2026-09-05 19:26:28 UTC

accidentally made one of those illusions where u cant tell which direction it is spinning in
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/220/070/225/429/395/original/83a2fe936a7e6b2d.mp4

2026-09-03 07:51:57 UTC

Tracking your activity then use them improve app behavior.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/206/015/326/540/311/original/0937e70050341f25.jpg

2026-08-28 11:32:36 UTC

https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/172/901/072/887/485/original/9f88c53adae380d6.jpg

2026-08-25 15:55:14 UTC

kagi translate is so fucked up like how the actual fuck does it translate this???
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/156/950/924/054/636/original/94ddd88fe7e80e0c.png

2026-08-24 10:16:30 UTC

you'd think an executable called MicrosoftSettings.exe that changes your browser homepage and search engine is some niche malware and not an official microsoft tool

2026-08-19 08:10:15 UTC

annoyed by fedi only letting me scroll for a few minutes before i hit yesterday's feed and have to return to living my life and making stuff i want to make

2026-08-18 15:01:06 UTC

no <bark> tag for dogs, despite <mrow> existing for cats 😔

2026-08-16 17:55:51 UTC

i believe "person bouncing ball" is the only emoji you can genderswap by naively reversing the string in js:
tomboy = "\u2640\u200d\ufe0f\u26f9\ufe0f\u200d\u2642"
femboy = tomboy.split``.reverse``.join``
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/106/469/720/821/564/original/75b6ba142102f0ea.png

2026-08-15 19:19:37 UTC

wtf is this captcha????
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/101/119/644/341/011/original/7b46db947248e726.webp

2026-08-14 13:06:48 UTC

This page is in Double Standards Mode. Page layout may be impacted. For Standards Mode use “<!DOCTYPE html>”.

2026-08-14 11:09:36 UTC

scan this queer
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/093/545/712/319/256/original/0bb6585834a532ff.webp

2026-08-12 17:05:16 UTC

open this image and hold your home button :3c
(android only, requires google's circle to search)
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/083/609/908/382/187/original/52d529b123e507e6.png

2026-08-12 11:23:47 UTC

ugh i accidentaly save my qr as jpeg .....
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/082/280/651/949/246/original/b7f964dc9d21bb55.png

2026-08-11 19:02:08 UTC

i love seeing creative qr code designs, so i made this guide explaining what tricks you can (and can't!) do with qr codes while still keeping them very much readable
have fun and make cool stuff!!
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/078/403/086/234/048/original/78a665f0cd3af8cf.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/078/403/325/283/799/original/ae0a5b5f7281adb6.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/078/403/482/018/878/original/0af31efe50cd04d6.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/078/403/601/307/115/original/ea7d9f8f8033337d.png

2026-08-09 13:28:06 UTC

steno keyboard visualizer
(full set: https://youtu.be/lLzSCJqGlOInal)
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/065/782/132/773/123/original/a68eb1e7e9730ddb.mp4

2026-08-06 19:52:17 UTC

ive been looking for this movie for over a decade now, maybe im famous enough for one of my followers to recognize it 🥺
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/050/300/474/549/106/original/2ef3302ad563ea9c.jpg

2026-07-29 11:29:36 UTC

people who compain about centering a div have never had the pleasure of wanting an image of any orientation to appear as large as possible on a screen of any orientation

2026-07-27 11:23:00 UTC

This must be what it feels like to be European!
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/991/677/232/124/645/original/4408741c461db6af.png

2026-07-21 20:59:01 UTC

send this to your favorite security researcher
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/959/970/536/439/341/original/3234a5fd642e3bdd.mp4

2026-07-18 09:24:30 UTC

wikipedia speedrun but its clicking through 88x31s

2026-07-15 08:45:02 UTC

i
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/923/099/687/113/540/original/4e3a2ea3984e8d99.jpg

2026-07-10 22:57:22 UTC

got a pretty good shot of my plane landing in tallinn
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/898/150/668/455/812/original/c4474422f3298e94.mp4

2026-07-10 10:14:49 UTC

WHAT is this notification????????
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/895/144/871/008/652/original/6c10adf14da4ba5c.jpg

2026-07-08 08:15:45 UTC

so turns out you can *still* use ublock on chrome if you just inspect element it lmfao
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/883/347/995/969/344/original/a10d0dcd94712042.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/883/348/235/584/697/original/5f256a21d22cb3c9.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/883/348/550/843/201/original/65d4dbfbc2bbf336.png

2026-07-06 10:15:32 UTC

kind of crazy how google's ai overview uses ai-generated articles based on my blogpost as sources, instead of, yknow, just using my original blogpost
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/872/501/217/972/603/original/c9cd312d0617c683.png

2026-07-05 16:35:42 UTC

quick proof of concept of the leak idea
though @nprofile…p5pl reminded me of their version of essentially the same thing (albeit with a bit different of an implementation): https://blog.pspaul.de/posts/bench-press-leaking-text-nodes-with-css/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/868/329/029/164/898/original/faa491cc14706770.mp4

2026-07-02 13:11:47 UTC

i just realized this dialog in old ios is slightly off-center, possibly due to the centering algorithm using the bounding box that includes the drop shadow
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/850/546/231/866/141/original/48a7ab98044cec5e.png

2026-07-01 12:18:01 UTC

discord switched to klipy now, so here, new s/i/x hack from yours truly
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/844/665/158/611/736/original/5133a7c1609236e6.png

2026-06-29 20:47:55 UTC

- reply

okay so apparently this is BAD and WRONG
https://www.unicode.org/versions/Unicode9.0.0/ch22.pdf
> In normal use, it is better to represent degrees Celsius “°C” with a sequence of U+00B0
degree sign + U+0043 latin capital letter c, rather than U+2103 degree celsius.

2026-06-29 20:45:03 UTC

til that ℃ is a single unicode character

2026-06-24 09:49:31 UTC

... did they put progress bars here just so it feels like i can "finish" something by buying stuff
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/804/450/701/856/688/original/07c44e4067dd8961.png

2026-06-06 07:06:43 UTC

hii im back now!!
the time off was good, i think from now on im gonna try to limit my twitter/bsky usage to computers when possible, it's a bit harder to just keep scrolling (fedi gets a free pass because it doesnt have an addicting algorithm)
anyways hii i missed u all so much!!
#nevent1q…ren8

2026-05-29 19:35:01 UTC

i love u all but i think i've got a bit addicted to social media again and need to get some time off
so, i'll be gone for the next week or so, probably working on my talk for cssday and the blog post about x86css - if u see me on fedi/twitter/bsky then yell at me to get off
<3
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/659/524/443/038/455/original/f2e7a3a2b56a855e.jpg

2026-05-29 11:06:17 UTC

FUCK
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/657/538/517/967/322/original/93aab9c001de6d5e.jpg

2026-05-26 23:32:58 UTC

(context: i made this in reply to a video on another platform demonstrating a tool that gets a new tor relay ip every 10 seconds)
bro still using tor for opsec 😂 bro doesnt know ip hider script virtualbox😈
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/643/482/364/240/244/original/0321fa7724c6ba5a.mp4

2026-05-24 23:34:26 UTC

i made a new game called js crossword where you have to solve it by literally writing javascript code that eval()'s into the correct values!
check it out if you're into ctfs or wanna challenge your javascript skills
https://lyra.horse/fun/jscrossword/ <3
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/632/163/015/230/784/original/474d56775d4c4f95.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/632/163/848/594/940/original/92d867d8ca84014e.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/632/164/396/361/786/original/3470ab85a6b77cc9.png

2026-05-22 04:17:54 UTC

i should frame this
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/616/282/372/979/980/original/4302781dc34cee47.jpg

2026-05-20 19:48:55 UTC

accidentally ended up on the news
https://arstechnica.com/security/2026/05/google-publishes-exploit-code-threatening-millions-of-chromium-users/
#nevent1q…nleu

2026-05-20 12:25:12 UTC

- reply

even worse, edge no longer even makes the download menu pop up, so it's completely silent js rce that keeps running even after you close the browser !!
all from just visiting a single website once !!
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/606/887/689/337/778/original/88c42ea5d6d57ce5.mp4

2026-05-20 12:12:07 UTC

- reply

OH NO I JUST REALIZED THIS IS NOT ACTUALLY PROPERLY FIXED AND STILL WORKS 💀💀
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/606/835/033/827/884/original/402b20343a50e84c.png

2026-05-20 11:42:20 UTC

back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member
in edge, you wouldn't even notice anything out-of-place, and would stay connected to the c2 even after closing the browser
today, almost 4 years later, the bug is finally public:
https://issues.chromium.org/issues/40062121
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/606/712/499/138/378/original/751aadcfcdfad72a.mp4

2026-05-15 16:00:57 UTC

yay, rebane mention on tom scott podcast!!
https://lateralcast.com/episodes/188/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/579/422/664/239/964/original/7e6f99342057341b.png

2026-05-13 09:54:18 UTC

laptop
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/566/658/136/984/006/original/53558480db877360.jpg

2026-05-03 14:25:32 UTC

i set up a new vps at some weird provider and they sent me an e-mail with my vps credentials
the root password said N/A, so you'd think that there's no root password by default. BUT NO! THE ROOT PASSWORD IS LITERALLY "N/A"!! AND SSHD IS EXPOSED ON PUBLIC IPV4?? THE FUCK ??
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/511/086/656/346/997/original/9363bbe79d02d42e.png

2026-05-03 08:23:51 UTC

i'll be giving my css clicker training talk at smashing meets next wednesday!
it's a free online event! check it out here:
https://smashingconf.com/meets-style-sheets
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/509/662/419/943/204/original/fc2a0cfd7b83fd55.png

2026-04-29 17:47:47 UTC

i love my wife so much i edit /shorts/ to /watch?v= before sending it a yt link

2026-04-27 11:31:03 UTC

found a random gpu on the ground, 59.404359,24.716840 if anybody wants it
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/476/440/611/365/375/original/e3e2f3b93a2dfdc8.jpg

2026-04-17 13:48:34 UTC

135tb ram bitches
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/420/349/014/037/726/original/d8b14a5143b81b21.jpg

2026-04-10 19:17:46 UTC

"gotcha"ing an autistic person into eating something with an ingredient they don't like to prove they can't tell is like me spitting in your drink to prove you can't tell that you've just drank my spit

2026-04-06 11:15:30 UTC

did you know? the google forms share icon has a stray pixel in its corner
why? because the icon spritesheet has a massive black triangle overlapping the icons
what is that triangle? it's a giant out-of-bounds hat!
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/357/452/365/762/220/original/9fed92f349085974.png

2026-04-03 19:10:52 UTC

i was curious as to what the qr code in a meme actually said but it wasn't scannable so i spent 2 hours manually recreating and decoding it
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/342/333/199/045/998/original/b9b9e3f58a0b75a0.mp4

2026-03-28 18:28:47 UTC

had to check my archive to make sure this was in fact the original thumbnail
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/308/215/141/473/132/original/6a94243de5d60e23.png

2026-03-23 09:04:31 UTC

the new image-animation css property is so cool wtf
i don't think you've ever been able to pause GIFs on the web before, this is such an accessibility win!!
https://github.com/w3c/csswg-drafts/issues/1615#issuecomment-2652101726
https://drafts.csswg.org/css-image-animation-1/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/277/670/377/548/781/original/d769f29ac2bd4d47.png

2026-03-22 23:09:15 UTC

we're finishing a game of sudoku that's been going on for 16 years
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/275/332/670/449/845/original/29223f3d434f59ee.jpg

2026-03-20 14:09:02 UTC

hii! if you're someone learning webdev and specifically css, what are some difficult or hard to understand/grasp parts for you?
i wanna make some beginner-friendly tutorial stuff and it would be good to know what i should focus on the most

2026-03-17 10:40:55 UTC

in linux you can use the evil bird emoticon (:>) to destroy files, eg `:> important_document.txt`
the bird will eat the file and leave it completely empty!

2026-03-09 15:59:47 UTC

did you know that SSH has a little-known secret menu?
i wrote a post about this on cohost a while back, but since that site shut down i'm posting it here too
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/200/035/509/605/989/original/a0ed7a4028eb7157.jpg
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/200/041/472/217/483/original/84cef1e14a4516b3.jpg
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/200/045/409/467/223/original/1e4755e92c930f4c.jpg

2026-03-09 15:46:42 UTC

fun linux fact:
the `if` shell built-in just executes the command you give it and looks at its exit code
so how can you do stuff like `if [ $a -gt 10 ]`?
well, [ is just a program usually in /bin/[ that takes the arguments ($a, -gt, 10, ]) and returns an exit code accordingly
this is also why you need the spaces between everything as well as quoting - they're ordinary arguments and need to be provided as such
also note that many shells do actually have similar shell built-ins such as [[ ]] and (( )), which are not stand-alone programs like [ is

2026-03-02 09:20:10 UTC

it performs decss in HOW MANY LINES??
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/158/831/903/991/396/original/bbdc0ced12308467.jpg

2026-02-26 16:35:02 UTC

i just got a notification for my own project?
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/137/898/330/713/037/original/2e81eac3c3b46adb.jpg

2026-02-26 11:36:48 UTC

this menu NEEDS an "i switched to vertical but meant to switch to vertical (flipped)" button
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/136/725/062/034/253/original/a9f82e2a2cc3b35d.jpg

2026-02-24 11:00:28 UTC

u never have to worry about ur code quality when posting on hackernews cuz they never read it anyways and just post their thoughts based on the title

2026-02-24 02:23:52 UTC

i built an entire x86 CPU emulator in CSS (no javascript)
you can write programs in C, compile them to x86 machine code with GCC, and run them inside CSS
https://lyra.horse/x86css/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/123/213/856/871/600/original/14beecddcc6775f2.mp4

2026-02-22 13:10:55 UTC

i just made something in css you people wouldn't believe

2026-02-19 21:50:17 UTC

self-hosting my S3 bucket the right way
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/099/496/323/659/317/original/8e3edf02213ae783.jpg

2026-02-12 14:21:48 UTC

the joke of "cool feature, can't wait to be able to use it in 5 years" is now baseline widely available

2026-02-03 23:15:31 UTC

- reply

@nprofile…d73q please give me a free software recommendation that can open up my after effects project from 5 years ago

2026-02-03 17:40:27 UTC

did you know? if you're a paying adobe user, you can message the support and ask for offline installers for the software you pay for
why would you do that? if they ever were to discontinue one of their products (*cough* animate), you could still install and activate it
and while i do not publicly endorse piracy (for obvious reasons), i do want to note that installations made with these offline installers have way safer methods of patching them than downloading a pirated copy that's potentially malicious
all i'm saying is, those installers are kind of annoying to get these days. if you pay for the software, ask for the installers and make backups of them.
oh and last - you can ask for older versions too! even older than what the CC app shows you
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/007/882/815/175/426/original/5f16d0834b835b93.png

2026-02-01 23:42:50 UTC

i made a version of wikipedia you can doomscroll
https://xikipedia.org/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/998/016/573/869/062/original/73dab5d8d42bbcc0.mp4

2026-01-21 16:10:10 UTC

i made an archery game that uses your charging cable as the controller
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/933/938/838/029/003/original/bbc64afa5cfc5e02.mp4

2026-01-13 20:25:12 UTC

yay! my first firefox cve!!
this bug is actually pretty fun, can't wait to be able to share the details
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/889/661/271/474/387/original/893c38349b93c4dc.png

2026-01-02 21:12:29 UTC

i made a flappy bird clone that uses your folding phone as the controller
https://lyra.horse/fun/foldy-bird/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/827/559/144/790/208/original/dda3fb73a76e86a5.mp4

2025-12-27 12:28:37 UTC

Finding me at #39C3:
Check the status below and say hi! I’ll be walking around the event with an orange backpack and sometimes a unicorn hat (pictured).
Photos are okay if you ask first.
I'm bad with names and faces, so show me your fedi profile if you think I might recognize you.
I'll be updating the status below from time to time, so keep an eye on it.
My current status:
[ ] At CCH, come say hi!
[X] At CCH, but busy or not looking to socialize.
[ ] Away from the CCH.
My current location:
CCH floor 1 (phone helpdesk line)
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/791/524/224/030/856/original/ae244e594e452578.jpg

2025-12-05 10:16:26 UTC

calling svgs an attack vector is a diabolical pun

2025-12-04 14:03:39 UTC

my new blogpost is out!!
this one talks about a new web vulnerability class i discovered that allows for complex interactive cross-origin attacks and data exfiltration
and i've already used it to get a google docs bounty ^^
have fun <3
https://lyra.horse/blog/2025/12/svg-clickjacking/

2025-12-01 18:56:44 UTC

would u believe this queer made a qr code generator inside an svg filter
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/645/824/015/020/296/original/39f5dbe0c1d5286a.png

2025-11-19 17:45:14 UTC

pretty fun stuff in here :)
https://hackaday.com/2025/11/18/congratulations-to-the-2025-component-abuse-challenge-winners/

2025-11-05 09:33:19 UTC

Worm.app :3
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/496/398/551/889/256/original/cf39c3742e2a51ae.mp4

2025-10-21 16:43:35 UTC

idk if i've ever posted here about my bliss keyboard
the keyboard itself is a WASD V3, but the keycap design is something fully custom i did myself
btw WASD Keyboards no longer exists, so that makes mine a bit more special
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/413/140/157/900/143/original/b9ca094b6b4128ce.png

2025-05-19 07:00:57 UTC

this slider
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/533/206/182/692/696/original/69f3b3f6d33c49df.mp4

2025-05-01 08:56:20 UTC

throwback to when i bought a cheap windows tablet and *this* was its tagline
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/431/734/593/181/600/original/d5f13f196434529b.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/431/735/044/070/505/original/fdf9468fe21198f4.png

2025-04-16 05:27:18 UTC

did they like, write this article with an ai that hallucinated a completely random first name for me??
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/345/973/390/477/891/original/5b230f72843c5cd5.png

2025-04-15 09:05:23 UTC

somebody broke into 4chan's servers, posted pics of the admin views and phpmyadmin page, and leaked partial source code and the posts from the jannie (mod) board
seems like the attacker had shell access on the server, so this might not be all
site itself is down right now

2025-04-02 11:27:19 UTC

lmao this is amazing, try opening the link, clicking on the laptop screen, and typing on your keyboard
https://developer.bbc.com/login-required

2025-04-01 14:27:29 UTC

it's finally time...
this is css clicker, a fully-featured incremental game where your goal is to design your own personal website and get as many views on it as possible
the fun part? it's a pure-css game, meaning it has zero javascript or server-side code.
have fun!
https://lyra.horse/css-clicker/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/263/172/007/422/192/original/dbacdaaef7938b23.png