arcanicanis on Nostr: Well, it’s really close in severity: when you can take over the deliverability of ...
Well, it’s really close in severity: when you can take over the deliverability of their posts to any followers (on any software) that aren’t on the same server, when you can take over where Direct Messages across servers end up, when you can change the public key cached for any remote user and start impersonating S2S traffic, and much more.
Published at
2024-02-15 22:24:13Event JSON
{
"id": "51682373f3dbbc429086d9257cbb7b302938edb9b460e398f53346778c59b040",
"pubkey": "0ed7afc8b04a4ef5d52c14fd46c65e452d62ca50a47d6cf5287ed2825a6d26f7",
"created_at": 1708035853,
"kind": 1,
"tags": [
[
"p",
"79c2cae114ea28a981e7559b4fe7854a473521a8d22a66bbab9fa248eb820ff6",
"wss://relay.mostr.pub"
],
[
"p",
"35c327905920ee1d1c2aa110208fc4f08807928dcea1ffbf9f3ad5418bbe56ea",
"wss://relay.mostr.pub"
],
[
"e",
"95f6951ee0f2cca52edba79820db3ee6f6e1370b49b35b8c824fe97f12716618",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://were.social/objects/a2e4827d-de05-495b-8159-290146c1b811",
"activitypub"
]
],
"content": "Well, it’s really close in severity: when you can take over the deliverability of their posts to any followers (on any software) that aren’t on the same server, when you can take over where Direct Messages across servers end up, when you can change the public key cached for any remote user and start impersonating S2S traffic, and much more.",
"sig": "6dfcac98e0f571e9a404e02b2337daab7d820da333bbe0d0ecda0d4f1e6d6d1881359bf9180a60fa2480973b5647ee5fad16e7c1e8768a465911ea67f0a13b13"
}
