hey so if you have a #spoutible account you need to immediately scroll to the end of this post, take the four steps listed, and then read the whole post. a vulnerability that was just fixed made it possible for an attacker to take complete control of your account without you getting any kind of notification.
https://www.troyhunt.com/how-spoutibles-leaky-api-spurted-out-a-deluge-of-personal-data/
#security
Scott :mbta_glx: /
npub13u…dhmnj
2024-02-05 15:01:59
Author Public Key
npub13usngh9ex6fta3vy2w2hu53aec599jwc9lqqw7wc2alz7636xansmdhmnjPublished at
2024-02-05 15:01:59Event JSON
{
"id": "1aa0151c87867fd52e3815925c02b513f505b98a6dcf20b86d4d1e9cac8b1db7",
"pubkey": "8f21345cb93692bec58453957e523dce2852c9d82fc00779d8577e2f6a3a3767",
"created_at": 1707145319,
"kind": 1,
"tags": [
[
"t",
"spoutible"
],
[
"t",
"security"
],
[
"proxy",
"https://better.boston/users/smadin/statuses/111879475668291623",
"activitypub"
]
],
"content": "hey so if you have a #spoutible account you need to immediately scroll to the end of this post, take the four steps listed, and then read the whole post. a vulnerability that was just fixed made it possible for an attacker to take complete control of your account without you getting any kind of notification.\n\nhttps://www.troyhunt.com/how-spoutibles-leaky-api-spurted-out-a-deluge-of-personal-data/\n\n#security",
"sig": "af81bbe3c70591c1b2eef55839feea567f47bf6fcc2eb8ec8689cccaaa4a5712e7f94152a8351857efb6f2c2d6b424e7f87844c7bd39ccf31b19fcebe4bc3ad2"
}