Reposted by AriesFlirtual @flirtual.com · 02/01/2025Happy New Year - here's what happened with Flirtual in 2024! 🎊 143
Aries @ariesclark.com · 03/12/2024Almost every other week I find a new platform with severe issues. Most however encourage responsible disclosure, unlike Avatown. It's horrifyingly common. 020
Aries @ariesclark.com · 03/12/2024I'm pretty sure they pulled the site after my post (also posted to Twitter) and others began exploring the vulnerabilities. 020
Aries @ariesclark.com · 03/12/2024It's a platform's responsibility to ensure the safety and security of its users' information. Don't make the same mistakes as Avatown. 000
Aries @ariesclark.com · 03/12/2024This is just the tip of the iceberg—these issues were discovered within only 20 minutes of visiting the site. If a malicious actor stumbled upon this, or if I had spent more time investigating, I'm confident I would uncover an entirely new trove of vulnerabilities. 110
Aries @ariesclark.com · 03/12/2024Avatown has a approval process in-place for new products, which is perfect for preventing spam & malicious listings. But, you can just update your own product's `isApprovedByAdmin` field to true, bypassing this protection entirely. 100
Aries @ariesclark.com · 03/12/2024Did you know everything on Avatown is free? When creating an order, your client sends a request to /api/v1/order/makeStripePayment, which would be fine, except for the fact that you provide which product you want & the price of it. Server-side validation, what's that? 120
Aries @ariesclark.com · 03/12/2024XSS injection, arbitrary code execution. An issue I test for quite often on platforms, and a fairly severe one at that. This vulnerability lets you redirect visitors, steal credentials & personal information. Spicy. 100
Aries @ariesclark.com · 03/12/2024The culprit: goavatown.com After reaching out and providing a responsible disclosure, they chose not to address the issues. Instead, they decided to remove me from their platform and community. So, logically, a public disclosure is next.goavatown.comAvatown - World's best Avatar MarketplaceWorld's best Avatar Marketplace 121
Aries @ariesclark.com · 03/12/2024Too often, platforms neglect security & safety. These must be priorities. Today, Avatown launched with major flaws—XSS, injection risks, and more. Let’s dive in 🧵 220
Reposted by Ariespassivestar @passivestar.bsky.social · 24/10/2024Recently I opened the last PR needed to make my godot theme complete. It addresses the issue of missing backgrounds in sidebars. After this it will only need smaller improvements github.com/godotengine/... Thanks for using my theme ❤️ 831422
Reposted by AriesCloudflare @cloudflare.social · 24/10/2024Cloudflare Workflows is now in open beta! Workflows allows you to build reliable, repeatable, long-lived multi-step applications that can automatically retry, persist state, and scale out. blog.cloudflare.com/building-wor...blog.cloudflare.comBuild durable applications on Cloudflare Workers: you write the Workflows, we take care of the restCloudflare Workflows is now in open beta! Workflows allows you to build reliable, repeatable, long-lived multi-step applications that can automatically retry, persist state, and scale out. Read on to ... 1419
Reposted by AriesVRChat @vrchat.com · 21/10/2024Our #Spookality2024 winners are finally here! Read our blog post to learn more: hello.vrchat.com/blog/spookal...hello.vrchat.comSpookality 2024 Winners Announced! — VRChatWe’ve judged your conjurations and constructions, your apparitions and summoned fiends. After much deliberation (see: being really scared but trying to act really cool and unbothered) we’re ready to a... 210619
Reposted by AriesDawn @dawn.awno.xyz · 21/10/2024i think its soo important to get the sky right if you want a place in vr to feel real. Stars especially just feel off most of the time, usually because they're way too bright or uniformly spaced out. for most of my worlds I like to use star maps from NASA: svs.gsfc.nasa.gov/4851/ #MadeForVRChat 36712
Aries @ariesclark.com · 21/10/2024the graphs in question: metrics.vrchat.communitymetrics.vrchat.communityGrafana 000
Reposted by Ariesdan @danabra.mov · 21/10/2024this thread is a wonderfully terse description of atproto 110316
Reposted by AriesCy🌦️HeeHeeHoo! @madohomurat.bsky.social · 17/10/2024did u guys know theres a labeller for pronouns? if you sub to it youll see the pronouns of folks using it beneath their username on their posts! its pretty cool and very easy to set up @pronouns.adorable.mom 461107955
Aries @ariesclark.com · 19/10/2024testing posts with external media links... do they embed...? files.aries.fyi/2024/10/19/e...files.aries.fyi 100
Aries @ariesclark.com · 19/10/2024I still find myself scrolling X, missing a lot of the "Tech Twitter" content here. 110
Aries @ariesclark.com · 19/10/2024The missile knows where it is, because it knows where it isn't. 010
Reposted by AriesAries @ariesclark.com · 19/10/2024when will I learn to proof read my "tweets"... 🫠 001
Aries @ariesclark.com · 19/10/2024we've got some exciting updates in the works, follow me and for sneak peaks maybe? who knows... 100
Aries @ariesclark.com · 19/10/2024I liked sasch's post so I'm going to do one of my own: I'm building @flirtu.al, the first VR dating app, we've been around since 2018 and just recently hit 100K profiles, maybe you'll meet your special someone? 🔗 flirtu.al (signing up is free!) #flirtual #vr #vrchat #madeforvrchatflirtu.alFlirtualThe first VR dating app. Join thousands for dates in VR apps like VRChat. 192
Reposted by AriesDuinrahaic @duinrahaic.app · 19/10/2024I created a feed for users to display their work in #VRChat If you want to show work on apps or creations that you are selling or showing off, simply tag with #MadeForVRChat or #MadeForVRC Let me know if adjustments or filters are needed to be made. bsky.app/profile/did:... 2239
Aries @ariesclark.com · 19/10/2024I want my Tech Twitter back. I used the Sky Bridge extension & everything, but still mostly meh content here. 310
Aries @ariesclark.com · 19/10/2024Want some help with this if you need it prioritized? Always available to give a hand ✌️ 000
Aries @ariesclark.com · 19/10/2024So true, I really don't like Bluesky so far, it's not really my preferred content. I still find myself mostly scrolling X since it has content relevant to me. 110
Aries @ariesclark.com · 19/10/2024My volume button fell off my Google Pixel 7 Pro and now I can't change the volume on my phone without opening settings. Might be time for a new phone, any suggestions? 000
Reposted by AriesSteve the Mitochondria @ninjasteve.bsky.social · 18/10/2024Current state of The Afterlife club floor, I think I can start prepping the lightmaps and bring it into Unity #blender #VRChat #Cyberpunk2077 0345
Reposted by AriesBLISS❁ @blissonline.art · 19/10/2024Finally bsky allowed to post video!!!! here's some of my motion graphic, visuals works on 2022 - 2023 🤍 #motiongraphic #visualart #art 05615
Aries @ariesclark.com · 18/10/2024it feels worse tbh, low post relevancy & quality. maybe I just need to curate my feed 000
