Phantasm on nostr

Open in Damus

silverpill · 1w

https://www.openwall.com/lists/oss-security/2026/03/09/7 Misskey and Sharkey, ActivityPub-based social network services (similar to Mastodon), have released updates to patch vulnerabilities Sharkey m...

Phantasm @Phantasm 1773090396

@silverpill It's nothing serious or severe. You could see posts you weren't supposed to if you were blocked and probably not a follower. And an HTTP signatures bypass.

https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/1275

2

nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqer26g8v2gdquxkyk43usmlk7gaqhle08p378ld3ldfd6p5yrt8us3qs2sp nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqdf0nthpgzfmvxrzj0cfypmmt45l0y770j260auqhm3l45hp3uhkqvrnptm the signature bypass was not including the digest, and all the code to c...

silverpill · 1w

nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqer26g8v2gdquxkyk43usmlk7gaqhle08p378ld3ldfd6p5yrt8us3qs2sp HTTP signature bypass is serious, but I can't figure out what it going in this PR. Looks like a bunch of unrelated changes