Vauxe Gorgoni 💚 | Music Producer 🎼| Part-time VTuber 🐍| 🔞

@vauxegorgoni.vtubers.social

She/They. Wife. 🏳️‍⚧️🏳️‍🌈🔞
Gorgon High Priestess 🍃 Millennial Cringe & Free 👏 Done By Humans, made live on Twitch

SoundCloud: soundcloud.com/vauxegorgoni
Twitch: twitch.tv/vauxegorgoni
Youtube: youtube.com/@VauxeGorgoni

@vauxegorgoni.vtubers.social

Alright lovelies, all our normal peeps are out today. So I'm gonna take today to do some PC maintaince before we double up next week with new colabs 💚 My CPU screams for a thermal paste swap and honestly there are 2 fans that are runnig on hope and vibes 😅

@vauxegorgoni.vtubers.social

So I haven't been uploading shorts to YT, because of a recent change.

Basically if you aren't partner you can't opt out of short "remixes" by #YT gen AI. Not only that, you don't even get to know what was made with your content through their shit AI

For now I plan on putting them here on Bsky 💚

@socksthewolf.comReposted by @vauxegorgoni.vtubers.social

Okay a tiny thread because people are going to freak out: This exploit in particular takes advantage of a special command that renders images (via attribute escape). If you have an overlay that processes images (most don't) then yes, this is your problem. Overlay must explicitly create img DOM.

A picture of the exploit, using a command that explicitly includes an image file extension, but also would escape out of the src attribute of an image such than an onerror attribute can be added to the img tag. This onerror attribute can run explicit javascript immediately. Default behavior for most chat widgets is if you have an image it will not attempt to modify image links into actual HTML image tags. Your overlay/overlay service must explicitly be doing this for you.
Older posts