Nostr notes by Rebane

ive always loved how the 3ds lights form a pretty gradient on low ...

2026-10-29T12:54:19Z

ive always loved how the 3ds lights form a pretty gradient on low battery

following up on my previous post ...

2026-10-28T10:29:06Z

following up on my previous post

the hardest problem in computer science is getting a file from ...

2026-10-26T21:48:07Z

the hardest problem in computer science is getting a file from one computer to another

wtf i just learned that you can middle-click the back/forward ...

2026-10-23T11:49:43Z

wtf i just learned that you can middle-click the back/forward buttons in browsers

whenevr queers ask for my whatsapp ...

2026-10-23T08:37:55Z

whenevr queers ask for my whatsapp

god it'd be so funny if 4 permabroke containment and became ...

2026-10-23T05:57:44Z

god it'd be so funny if 4 permabroke containment and became the new 67

why are hotel showers always designed to get the entire bathroom ...

2026-10-17T16:43:02Z

why are hotel showers always designed to get the entire bathroom wet??

trying to get this score as low as possible ...

2026-10-08T21:39:12Z

trying to get this score as low as possible

chat are we installing OSName? ...

2026-10-07T22:30:46Z

chat are we installing OSName?

Nostr event nevent1qqsty9gyr44hl2tkzs52vc59ymkcxkn35607y0nr4gswz7ldxjh23ngzyp5hdwp27l32g6jctdn58v940ugfj7yy9pyr8mmmnkd8u2jpc50sq4h033e

2026-10-01T18:38:08Z

this old pic of me with a trans looking aurora kinda fucks ...

2026-09-27T23:48:11Z

this old pic of me with a trans looking aurora kinda fucks

Nostr event nevent1qqsv7sh6s95l240c6hy9axvkrxvvmeqtxf4fsyw9rzm2n75zwl78llgzyp5hdwp27l32g6jctdn58v940ugfj7yy9pyr8mmmnkd8u2jpc50sqw8qsfy

2026-09-25T09:41:57Z

Introducing 𝙷𝚊𝚠𝚔𝚃𝚞𝚊𝚑𝙱𝚛𝚘𝚠𝚜𝚎𝚛.𝚎𝚡𝚎

- 15 KB native web browser
- 6 MB of RAM for the host
- 0 lines of Visual Basic (no C# cuz idk how to write it)
- no URL bar because surfing through 88x31s is more fun
- title bar kept cuz then u can close it and minimize buttons

crazy find in gmail source code ...

2026-09-25T09:13:32Z

crazy find in gmail source code

did you know? the ❌ on the cloudflare error page is not ...

2026-09-23T10:50:20Z

did you know? the ❌ on the cloudflare error page is not symmetric!

i've begun to prefer "content note" over "content ...

2026-09-20T08:09:06Z

i've begun to prefer "content note" over "content warning" because the former feels more acceptable to use for things that might not "qualify" for a warning

accidentally made one of those illusions where u cant tell which ...

2026-09-05T19:26:28Z

accidentally made one of those illusions where u cant tell which direction it is spinning in

Tracking your activity then use them improve app behavior. ...

2026-09-03T07:51:57Z

Tracking your activity then use them improve app behavior.

Nostr event nevent1qqspmrxxch0gax8gdm90cc4ey8ghfyphejsvl2p6uqyqwsltqkdqzrszyp5hdwp27l32g6jctdn58v940ugfj7yy9pyr8mmmnkd8u2jpc50sq5lfqex

2026-08-28T11:32:36Z

kagi translate is so fucked up like how the actual fuck does it ...

2026-08-25T15:55:14Z

kagi translate is so fucked up like how the actual fuck does it translate this???

you'd think an executable called MicrosoftSettings.exe that ...

2026-08-24T10:16:30Z

you'd think an executable called MicrosoftSettings.exe that changes your browser homepage and search engine is some niche malware and not an official microsoft tool

annoyed by fedi only letting me scroll for a few minutes before i ...

2026-08-19T08:10:15Z

annoyed by fedi only letting me scroll for a few minutes before i hit yesterday's feed and have to return to living my life and making stuff i want to make

no <bark> tag for dogs, despite <mrow> existing for ...

2026-08-18T15:01:06Z

no <bark> tag for dogs, despite <mrow> existing for cats 😔

i believe "person bouncing ball" is the only emoji you ...

2026-08-16T17:55:51Z

i believe "person bouncing ball" is the only emoji you can genderswap by naively reversing the string in js:

tomboy = "\u2640\u200d\ufe0f\u26f9\ufe0f\u200d\u2642"
femboy = tomboy.split``.reverse``.join``

wtf is this captcha???? ...

2026-08-15T19:19:37Z

wtf is this captcha????

This page is in Double Standards Mode. Page layout may be ...

2026-08-14T13:06:48Z

This page is in Double Standards Mode. Page layout may be impacted. For Standards Mode use “<!DOCTYPE html>”.

scan this queer ...

2026-08-14T11:09:36Z

scan this queer

open this image and hold your home button :3c (android only, ...

2026-08-12T17:05:16Z

open this image and hold your home button :3c

(android only, requires google's circle to search)

ugh i accidentaly save my qr as jpeg ..... ...

2026-08-12T11:23:47Z

ugh i accidentaly save my qr as jpeg .....

i love seeing creative qr code designs, so i made this guide ...

2026-08-11T19:02:08Z

i love seeing creative qr code designs, so i made this guide explaining what tricks you can (and can't!) do with qr codes while still keeping them very much readable

have fun and make cool stuff!!

steno keyboard visualizer (full set: ...

2026-08-09T13:28:06Z

steno keyboard visualizer
(full set: https://youtu.be/lLzSCJqGlOInal)

ive been looking for this movie for over a decade now, maybe im ...

2026-08-06T19:52:17Z

ive been looking for this movie for over a decade now, maybe im famous enough for one of my followers to recognize it 🥺

people who compain about centering a div have never had the ...

2026-07-29T11:29:36Z

people who compain about centering a div have never had the pleasure of wanting an image of any orientation to appear as large as possible on a screen of any orientation

This must be what it feels like to be European! ...

2026-07-27T11:23:00Z

This must be what it feels like to be European!

send this to your favorite security researcher ...

2026-07-21T20:59:01Z

send this to your favorite security researcher

Nostr event nevent1qqsy6aruf0yem0uyrc3tu5m4rucpc300cy4am0gsgcpmhxzrcwklg2szyp5hdwp27l32g6jctdn58v940ugfj7yy9pyr8mmmnkd8u2jpc50sq36eass

2026-07-18T09:24:30Z

wikipedia speedrun but its clicking through 88x31s

Nostr event nevent1qqs02fkkz2v0j02yxqyjz73f4vewxnt64q5nmt5ch0nwqjr99ppsq6gzyp5hdwp27l32g6jctdn58v940ugfj7yy9pyr8mmmnkd8u2jpc50sqrt325z

2026-07-15T08:45:02Z

got a pretty good shot of my plane landing in tallinn ...

2026-07-10T22:57:22Z

got a pretty good shot of my plane landing in tallinn

WHAT is this notification???????? ...

2026-07-10T10:14:49Z

WHAT is this notification????????

so turns out you can still use ublock on chrome if you just ...

2026-07-08T08:15:45Z

so turns out you can *still* use ublock on chrome if you just inspect element it lmfao

kind of crazy how google's ai overview uses ai-generated ...

2026-07-06T10:15:32Z

kind of crazy how google's ai overview uses ai-generated articles based on my blogpost as sources, instead of, yknow, just using my original blogpost

quick proof of concept of the leak idea though @nprofile…p5pl ...

2026-07-05T16:35:42Z

quick proof of concept of the leak idea

though nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqat960hkp608a57xfduduhmdfn37f8s68xkcp72kwyngt6488fhwqnvp5pl (nprofile…p5pl) reminded me of their version of essentially the same thing (albeit with a bit different of an implementation): https://blog.pspaul.de/posts/bench-press-leaking-text-nodes-with-css/

i just realized this dialog in old ios is slightly off-center, ...

2026-07-02T13:11:47Z

i just realized this dialog in old ios is slightly off-center, possibly due to the centering algorithm using the bounding box that includes the drop shadow

discord switched to klipy now, so here, new s/i/x hack from yours ...

2026-07-01T12:18:01Z

discord switched to klipy now, so here, new s/i/x hack from yours truly

okay so apparently this is BAD and WRONG ...

2026-06-29T20:47:55Z

In reply to nevent1q…z4ss
_________________________

okay so apparently this is BAD and WRONG

https://www.unicode.org/versions/Unicode9.0.0/ch22.pdf
> In normal use, it is better to represent degrees Celsius “°C” with a sequence of U+00B0
degree sign + U+0043 latin capital letter c, rather than U+2103 degree celsius.

Nostr event nevent1qqs2s75agxwgtxlrnts5lgndy0va5smuajmg4g99fpnsk6k6wlcv50czyp5hdwp27l32g6jctdn58v940ugfj7yy9pyr8mmmnkd8u2jpc50sqsz6y5e

2026-06-29T20:45:03Z

til that ℃ is a single unicode character

... did they put progress bars here just so it feels like i can ...

2026-06-24T09:49:31Z

... did they put progress bars here just so it feels like i can "finish" something by buying stuff

hii im back now!! the time off was good, i think from now on im ...

2026-06-06T07:06:43Z

hii im back now!!

the time off was good, i think from now on im gonna try to limit my twitter/bsky usage to computers when possible, it's a bit harder to just keep scrolling (fedi gets a free pass because it doesnt have an addicting algorithm)

anyways hii i missed u all so much!!

quoting
nevent1q…ren8
i love u all but i think i've got a bit addicted to social media again and need to get some time off

so, i'll be gone for the next week or so, probably working on my talk for cssday and the blog post about x86css - if u see me on fedi/twitter/bsky then yell at me to get off

<3

i love u all but i think i've got a bit addicted to social ...

2026-05-29T19:35:01Z

i love u all but i think i've got a bit addicted to social media again and need to get some time off

so, i'll be gone for the next week or so, probably working on my talk for cssday and the blog post about x86css - if u see me on fedi/twitter/bsky then yell at me to get off

<3

Nostr event nevent1qqs0y7fu20px8lvjwg6ugmm6g2ywv4u0jmzjy55dknjlzjlwx4u4u4czyp5hdwp27l32g6jctdn58v940ugfj7yy9pyr8mmmnkd8u2jpc50sqddrrq7

2026-05-29T11:06:17Z

FUCK

(context: i made this in reply to a video on another platform ...

2026-05-26T23:32:58Z

(context: i made this in reply to a video on another platform demonstrating a tool that gets a new tor relay ip every 10 seconds)

bro still using tor for opsec 😂 bro doesnt know ip hider script virtualbox😈

i made a new game called js crossword where you have to solve it ...

2026-05-24T23:34:26Z

i made a new game called js crossword where you have to solve it by literally writing javascript code that eval()'s into the correct values!

check it out if you're into ctfs or wanna challenge your javascript skills

https://lyra.horse/fun/jscrossword/ <3

i should frame this ...

2026-05-22T04:17:54Z

i should frame this

accidentally ended up on the news ...

2026-05-20T19:48:55Z

accidentally ended up on the news
https://arstechnica.com/security/2026/05/google-publishes-exploit-code-threatening-millions-of-chromium-users/

quoting
nevent1q…nleu
back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member

in edge, you wouldn't even notice anything out-of-place, and would stay connected to the c2 even after closing the browser

today, almost 4 years later, the bug is finally public:
https://issues.chromium.org/issues/40062121

even worse, edge no longer even makes the download menu pop up, ...

2026-05-20T12:25:12Z

In reply to nevent1q…0u4s
_________________________

even worse, edge no longer even makes the download menu pop up, so it's completely silent js rce that keeps running even after you close the browser !!

all from just visiting a single website once !!

OH NO I JUST REALIZED THIS IS NOT ACTUALLY PROPERLY FIXED AND ...

2026-05-20T12:12:07Z

In reply to nevent1q…ctvt
_________________________

OH NO I JUST REALIZED THIS IS NOT ACTUALLY PROPERLY FIXED AND STILL WORKS 💀💀

back in 2022 i found a bug that would let me, with no user ...

2026-05-20T11:42:20Z

back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member

in edge, you wouldn't even notice anything out-of-place, and would stay connected to the c2 even after closing the browser

today, almost 4 years later, the bug is finally public:
https://issues.chromium.org/issues/40062121

yay, rebane mention on tom scott podcast!! ...

2026-05-15T16:00:57Z

yay, rebane mention on tom scott podcast!!

https://lateralcast.com/episodes/188/

Nostr event nevent1qqs89c07dwksvra3xp93s3v87r96m29t4var9g0crx2ceeypr42jm6qzyp5hdwp27l32g6jctdn58v940ugfj7yy9pyr8mmmnkd8u2jpc50sq02vvmg

2026-05-13T09:54:18Z

laptop

i set up a new vps at some weird provider and they sent me an ...

2026-05-03T14:25:32Z

i set up a new vps at some weird provider and they sent me an e-mail with my vps credentials

the root password said N/A, so you'd think that there's no root password by default. BUT NO! THE ROOT PASSWORD IS LITERALLY "N/A"!! AND SSHD IS EXPOSED ON PUBLIC IPV4?? THE FUCK ??

i'll be giving my css clicker training talk at smashing meets ...

2026-05-03T08:23:51Z

i'll be giving my css clicker training talk at smashing meets next wednesday!

it's a free online event! check it out here:
https://smashingconf.com/meets-style-sheets

i love my wife so much i edit /shorts/ to /watch?v= before ...

2026-04-29T17:47:47Z

i love my wife so much i edit /shorts/ to /watch?v= before sending it a yt link

found a random gpu on the ground, 59.404359,24.716840 if anybody ...

2026-04-27T11:31:03Z

found a random gpu on the ground, 59.404359,24.716840 if anybody wants it

135tb ram bitches ...

2026-04-17T13:48:34Z

135tb ram bitches

"gotcha"ing an autistic person into eating something with ...

2026-04-10T19:17:46Z

"gotcha"ing an autistic person into eating something with an ingredient they don't like to prove they can't tell is like me spitting in your drink to prove you can't tell that you've just drank my spit

did you know? the google forms share icon has a stray pixel in ...

2026-04-06T11:15:30Z

did you know? the google forms share icon has a stray pixel in its corner

why? because the icon spritesheet has a massive black triangle overlapping the icons

what is that triangle? it's a giant out-of-bounds hat!

i was curious as to what the qr code in a meme actually said but ...

2026-04-03T19:10:52Z

i was curious as to what the qr code in a meme actually said but it wasn't scannable so i spent 2 hours manually recreating and decoding it

had to check my archive to make sure this was in fact the ...

2026-03-28T18:28:47Z

had to check my archive to make sure this was in fact the original thumbnail

the new image-animation css property is so cool wtf i don't ...

2026-03-23T09:04:31Z

the new image-animation css property is so cool wtf

i don't think you've ever been able to pause GIFs on the web before, this is such an accessibility win!!

https://github.com/w3c/csswg-drafts/issues/1615#issuecomment-2652101726
https://drafts.csswg.org/css-image-animation-1/

we're finishing a game of sudoku that's been going on for ...

2026-03-22T23:09:15Z

we're finishing a game of sudoku that's been going on for 16 years

hii! if you're someone learning webdev and specifically css, ...

2026-03-20T14:09:02Z

hii! if you're someone learning webdev and specifically css, what are some difficult or hard to understand/grasp parts for you?

i wanna make some beginner-friendly tutorial stuff and it would be good to know what i should focus on the most

in linux you can use the evil bird emoticon (:>) to destroy ...

2026-03-17T10:40:55Z

in linux you can use the evil bird emoticon (:>) to destroy files, eg `:> important_document.txt`

the bird will eat the file and leave it completely empty!

did you know that SSH has a little-known secret menu? i wrote a ...

2026-03-09T15:59:47Z

did you know that SSH has a little-known secret menu?

i wrote a post about this on cohost a while back, but since that site shut down i'm posting it here too

fun linux fact: the `if` shell built-in just executes the command ...

2026-03-09T15:46:42Z

fun linux fact:
the `if` shell built-in just executes the command you give it and looks at its exit code

so how can you do stuff like `if [ $a -gt 10 ]`?

well, [ is just a program usually in /bin/[ that takes the arguments ($a, -gt, 10, ]) and returns an exit code accordingly

this is also why you need the spaces between everything as well as quoting - they're ordinary arguments and need to be provided as such

also note that many shells do actually have similar shell built-ins such as [[ ]] and (( )), which are not stand-alone programs like [ is

it performs decss in HOW MANY LINES?? ...

2026-03-02T09:20:10Z

it performs decss in HOW MANY LINES??

i just got a notification for my own project? ...

2026-02-26T16:35:02Z

i just got a notification for my own project?

this menu NEEDS an "i switched to vertical but meant to ...

2026-02-26T11:36:48Z

this menu NEEDS an "i switched to vertical but meant to switch to vertical (flipped)" button

u never have to worry about ur code quality when posting on ...

2026-02-24T11:00:28Z

u never have to worry about ur code quality when posting on hackernews cuz they never read it anyways and just post their thoughts based on the title

i built an entire x86 CPU emulator in CSS (no javascript) you can ...

2026-02-24T02:23:52Z

i built an entire x86 CPU emulator in CSS (no javascript)

you can write programs in C, compile them to x86 machine code with GCC, and run them inside CSS

https://lyra.horse/x86css/

Nostr event nevent1qqsqfnj059ma2ajs3j7t0vad6ptr2gu7d4fc5r2m36rh4t460grpj5szyp5hdwp27l32g6jctdn58v940ugfj7yy9pyr8mmmnkd8u2jpc50sqksvnyd

2026-02-22T13:10:55Z

i just made something in css you people wouldn't believe

self-hosting my S3 bucket the right way ...

2026-02-19T21:50:17Z

self-hosting my S3 bucket the right way

the joke of "cool feature, can't wait to be able to use ...

2026-02-12T14:21:48Z

the joke of "cool feature, can't wait to be able to use it in 5 years" is now baseline widely available

@nprofile…d73q please give me a free software recommendation ...

2026-02-03T23:15:31Z

In reply to nevent1q…9yuz
_________________________

nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqufmlneg8tt9jwvk6p40t02lxhmkns6zlpu4cwrvxerczdnn4syzq4pd73q (nprofile…d73q) please give me a free software recommendation that can open up my after effects project from 5 years ago

did you know? if you're a paying adobe user, you can message ...

2026-02-03T17:40:27Z

did you know? if you're a paying adobe user, you can message the support and ask for offline installers for the software you pay for

why would you do that? if they ever were to discontinue one of their products (*cough* animate), you could still install and activate it

and while i do not publicly endorse piracy (for obvious reasons), i do want to note that installations made with these offline installers have way safer methods of patching them than downloading a pirated copy that's potentially malicious

all i'm saying is, those installers are kind of annoying to get these days. if you pay for the software, ask for the installers and make backups of them.

oh and last - you can ask for older versions too! even older than what the CC app shows you

i made a version of wikipedia you can doomscroll ...

2026-02-01T23:42:50Z

i made a version of wikipedia you can doomscroll
https://xikipedia.org/

i made an archery game that uses your charging cable as the ...

2026-01-21T16:10:10Z

i made an archery game that uses your charging cable as the controller

yay! my first firefox cve!! this bug is actually pretty fun, ...

2026-01-13T20:25:12Z

yay! my first firefox cve!!

this bug is actually pretty fun, can't wait to be able to share the details

i made a flappy bird clone that uses your folding phone as the ...

2026-01-02T21:12:29Z

i made a flappy bird clone that uses your folding phone as the controller

https://lyra.horse/fun/foldy-bird/

Finding me at #39C3: Check the status below and say hi! I’ll be ...

2025-12-27T12:28:37Z

Finding me at #39C3:

Check the status below and say hi! I’ll be walking around the event with an orange backpack and sometimes a unicorn hat (pictured).

Photos are okay if you ask first.

I'm bad with names and faces, so show me your fedi profile if you think I might recognize you.

I'll be updating the status below from time to time, so keep an eye on it.

My current status:
[ ] At CCH, come say hi!
[X] At CCH, but busy or not looking to socialize.
[ ] Away from the CCH.

My current location:
CCH floor 1 (phone helpdesk line)

Nostr event nevent1qqsxs66k8uj7spfrvy5h3d5yjculps9cqt9h26yw056kqxl22kg002czyp5hdwp27l32g6jctdn58v940ugfj7yy9pyr8mmmnkd8u2jpc50sq9k0plz

2025-12-05T10:16:26Z

calling svgs an attack vector is a diabolical pun

my new blogpost is out!! this one talks about a new web ...

2025-12-04T14:03:39Z

my new blogpost is out!!

this one talks about a new web vulnerability class i discovered that allows for complex interactive cross-origin attacks and data exfiltration

and i've already used it to get a google docs bounty ^^

have fun <3

https://lyra.horse/blog/2025/12/svg-clickjacking/

would u believe this queer made a qr code generator inside an svg ...

2025-12-01T18:56:44Z

would u believe this queer made a qr code generator inside an svg filter

pretty fun stuff in here :) ...

2025-11-19T17:45:14Z

pretty fun stuff in here :)
https://hackaday.com/2025/11/18/congratulations-to-the-2025-component-abuse-challenge-winners/

Worm.app :3 ...

2025-11-05T09:33:19Z

Worm.app :3

idk if i've ever posted here about my bliss keyboard the ...

2025-10-21T16:43:35Z

idk if i've ever posted here about my bliss keyboard

the keyboard itself is a WASD V3, but the keycap design is something fully custom i did myself

btw WASD Keyboards no longer exists, so that makes mine a bit more special

this slider ...

2025-05-19T07:00:57Z

this slider

throwback to when i bought a cheap windows tablet and this was ...

2025-05-01T08:56:20Z

throwback to when i bought a cheap windows tablet and *this* was its tagline

did they like, write this article with an ai that hallucinated a ...

2025-04-16T05:27:18Z

did they like, write this article with an ai that hallucinated a completely random first name for me??

somebody broke into 4chan's servers, posted pics of the admin ...

2025-04-15T09:05:23Z

somebody broke into 4chan's servers, posted pics of the admin views and phpmyadmin page, and leaked partial source code and the posts from the jannie (mod) board

seems like the attacker had shell access on the server, so this might not be all

site itself is down right now

lmao this is amazing, try opening the link, clicking on the ...

2025-04-02T11:27:19Z

lmao this is amazing, try opening the link, clicking on the laptop screen, and typing on your keyboard
https://developer.bbc.com/login-required

it's finally time... this is css clicker, a fully-featured ...

2025-04-01T14:27:29Z

it's finally time...

this is css clicker, a fully-featured incremental game where your goal is to design your own personal website and get as many views on it as possible

the fun part? it's a pure-css game, meaning it has zero javascript or server-side code.

have fun!

https://lyra.horse/css-clicker/