#indieweb 2025-04-02

2025-04-02 UTC
gregsarjeant joined the channel
#
Loqi [indienews] New post: "Client-side RCE via symlink following in Google Web Designer for macOS/Linux: CVE-2025-1079" https://balintmagyar.com/articles/google-web-designer-symlink-client-side-rce-cve-2025-1079
#
[tantek] huh, does anyone here even use Google Web Designer? I didn't even know that was a thing
#
[tantek] what is Google Web Designer?
#
Loqi It looks like we don't have a page for "Google Web Designer" yet. Would you like to create it? (Or just say "Google Web Designer is ____", a sentence describing the term)
#
balintm doubt. it's a WYSIWYG editor aimed at small businesses
#
[tantek] struggling to see the IndieWeb relevance of that IndieNews post 🤔
bret joined the channel
#
balintm apologies, i assumed the outlet was for posts ON the indieweb in general…any way i can remove it tantek?
#
[tantek] that would be A LOT of posts balintm 😂
#
[tantek] http://stream.indieweb.org is for posts ON the indieweb in general, by folks in this community
#
balintm yeah makes sense in hindsight. i just assumed it was an underutilized feature…
#
[tantek] > any way i can remove it
#
[tantek] yes! remove the syndication link and then resend a webmention, that should work
#
[tantek] let's see if our wiki has clear enough guidance
#
[tantek] what is IndieNews
#
Loqi IndieNews is an indieweb-specific news aggregator which only accepts submissions via webmention https://indieweb.org/IndieNews
#
[tantek] hmm, doesn't seem like it.
#
balintm i assume the submission form on the side sends a webmention in the background? i just removed the syndication link but haven't resubmitted yet
#
balintm the form just gave me an error…i guess i'll look into webmentions
aelaraji joined the channel
#
[tantek] huh
#
[tantek] yes, I'm pretty sure the form on IndieNews sends a webmention the background. aaronpk would know more
#
[tantek] congrats on finding the CVE and the payout! that is impressive! balintm++
#
Loqi balintm has 1 karma in this channel over the last year (3 in all channels)
#
[tantek] post showed up on http://stream.indieweb.org and in #indieweb-stream
#
balintm appreciate it!
#
balintm taking the WM stuff to -dev in the hopes we can debug
#
[tantek] good call 👍
sebbu2, Nonsvch, balintm, aelaraji, bossy, Ryeliegator, barnaby, [tantek], [tw2113], [0x3b0b], snoreboar, jgee03797, chapien, nemonical, GuestZero and _justin_kelly71 joined the channel