During our research about how different platforms and apps generate link previews, we discovered a vulnerability in #Reddit and reached out to their security team. They were quick and cooperative. They treated our work very fairly. One caveat though, they don't allow disclosure of security bugs even after fixing them.
If you're curious how link previews get generated in chats and direct messages, check out our article:
https://www.mysk.blog/2020/10/25/link-previews/
Mysk🇨🇦🇩🇪 /
npub1ex…08x90
2023-06-16 22:27:40
Author Public Key
npub1exwkjulsaqdh5xlplwrnzs3z0p9shf54hw3kxj4pu8eq3wc35y0qu08x90Published at
2023-06-16 22:27:40Event JSON
{
"id": "e40f24ebbd26d4356b718d3defbe22ffde2d2c08f79bf9c7abf7c28a9f18ad35",
"pubkey": "c99d6973f0e81b7a1be1fb87314222784b0ba695bba3634aa1e1f208bb11a11e",
"created_at": 1686954460,
"kind": 1,
"tags": [
[
"t",
"reddit"
],
[
"mostr",
"https://defcon.social/users/mysk/statuses/110556247531650501"
]
],
"content": "During our research about how different platforms and apps generate link previews, we discovered a vulnerability in #Reddit and reached out to their security team. They were quick and cooperative. They treated our work very fairly. One caveat though, they don't allow disclosure of security bugs even after fixing them.\n\nIf you're curious how link previews get generated in chats and direct messages, check out our article:\n\nhttps://www.mysk.blog/2020/10/25/link-previews/",
"sig": "88ad3a39ed8ba59adec68e43fbef02bbba66f7b430af889efd026f74b3a0084bf47f15d72f1577a4b6f546e6d3bd4b7c4bd0e854e32b734ed30b8d8e0b0971d1"
}