Bill Mill

https://hachyderm.io/@llimllib

I like to write code

Portland, Maine, USA

home: https://billmill.org
github: https://github.com/llimllib
blog(s): https://notes.billmill.org

Public Key

npub1qwsjwlykppfdqcvujrnce6yr7je5vcgjltg2umywykr0sm0k06zs8t96m8

NIP-05 Address

llimllib_at_hachyderm.io@momostr.pink

Profile Code

nprofile1qqsq8gf80jtqs5ksvxwfpeuvazplfv6xvyf0459wdj8ztphcdhm8apgpzemhxue69uhhyetvv9ujumn0wd68ytnzv9hxgdygu23

Publishing to

relay.nostr.band

Author Public Key

npub1qwsjwlykppfdqcvujrnce6yr7je5vcgjltg2umywykr0sm0k06zs8t96m8

Show more details

Last Notes

2024-07-03 12:16:27

- reply

The vector for us was that somebody uploaded a file with a jpg extension that was actually an EPS (postscript) file. A javascript library passed the image to imagemagick, which detected it as a postscript file and passed it off to ghostscript (we had no idea it would do this), which then happily gave shell to the attacker. madness

2024-07-03 12:16:27

- reply

2024-07-03 12:14:07

- reply

We had this reported against us and had to fix it already! So I know it's been out in the wild.
I didn't have time to pin it down far enough to make a proper report, unfortunately

2024-07-03 12:14:07

- reply

We had this reported against us and had to fix it already! So I know it's been out in the wild.
I didn't have time to pin it down far enough to make a proper report, unfortunately