I would argue this might make xz safer mid-term. So much eyes on it. I’m not familiar with other solutions, but who’s to say the bad actor won’t try a similar trick elsewhere

Thanks, TIL. I fixed the title

I live in Montpellier. It’s free for the whole metropole, meaning Montpellier and the 30 cities around it

Shameless plug, but I work for Slite.com and you should try it. We also made a browser extension that replace your new tab with our editor, no strings attached: For Firefox and for Chrome

I think all the bananas (and beans) are already in the picture

First replication of a room temperature superconductor

You can even see the decline in posts and votes before GPT became mainstream. This definitely look more like search engine failing to get rid of those cheap copycats.

I made a website to compare prices across regions for Nintendo Switch games. It started as a Google Spreadsheet but because of traffic I quickly had to move to a standalone website. Getting around 2M users per months now. I’m trying to keep the ads to a minimum, and I’m partnering with online stores for gift cards.

From the fix, I believe the custom emojis were not double checked after a user submits a post. The post data was used to display the emojis, and thus allowing injection.

The fix now is to search the emojis in the custom emojis list from the backend rather than the user post.