🔔

Posts tagged with :bell:

karmanyaahm
@karmanyaahm0
https://cloud-bh60plnrx-hack-club-bot.vercel.app/0screenshot_20230226-034613.png
karmanyaahm
@karmanyaahm0
Did someone say push notifications in the FOSS F-Droid version of Nextcloud? Edit to clarify: [email protected] has been working on a version of Nextcloud that supports UnifiedPush. Originally, we thought it would need a gateway (a server that converts between push formats) to function. However, reading through the Nextcloud code, I realized that they don't have any URL normalization, they just append "/notification" to the provided URL (caused the need for a gateway in the first place). So, I realized, we could just add a "#" to the end of our push URL, like ntfy.sh/upABCDEFGH?up=1#, then, Nextcloud will send notifications to ntfy.sh/upABCDEFGH?up=1#/notification, which is effectively our original URL! (Stuff after # is ignored). One of the most useful (benign) injection attacks I've ever come up with. Boom! No gateway Nextcloud UnifiedPush: github.com/nr23730/nextcloud-android/pull/1/files
https://cloud-c57ztoz2g-hack-club-bot.vercel.app/0screenshot_20230208-232728.png
linus
@linus0
Our checked bag finally came with the best souvenir: an authentic, used cow bell!
https://cloud-k8mxzyk0v-hack-club-bot.vercel.app/0img_5509.jpg