GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE
  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    abadidea (0xabad1dea@infosec.exchange)'s status on Tuesday, 13-May-2025 19:09:24 JSTabadideaabadidea

    Incredible: if you voice-dictate a message about adult chuck-e-cheese alternative Dave & Busters into iMessage, it gets flagged as a potential hacking attempt by the other iMessage client and never arrives. Because the voice-to-text detects it as a known phrase with a special typography (with the "&", not "and"), but the substitution is happening at the wrong layer and so it gets encoded as a raw '&' in the message HTML rather than an '&'. The other end correctly detects malformed HTML and panics.

    Presumably, you could also run into this problem with other brands such as Simon & Schuster.

    https://rambo.codes/posts/2025-05-12-cracking-the-dave-and-busters-anomaly

    In conversationabout a year ago from infosec.exchangepermalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: rambo.codes
      Cracking The Dave & Buster’s Anomaly | Rambo Codes
      Gui Rambo writes about his coding and reverse engineering adventures.
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.