𝙚𝙧𝙧𝙚

  • 2 Posts
  • 27 Comments
Joined 1 year ago
cake
Cake day: June 17th, 2023

help-circle





  • Looks like it’s issuing a GET to https://zelensky.zip/save/{ENCODED_JWT_TOKEN_AND_NAV_FLAG}. The ENCODED_JWT_TOKEN is from btoa(document.cookie+nav_flag) where nav_flag is essentially 'navAdmin' if the account hit is an admin or '' if the user hit is not an admin (it checks if the admin button in the nav exists). Their server is likely logging all incoming requests and they just need to do a quick decoding to get jwt tokens and a flag telling them if it’s an admin account.

    I’d be hesitant to visit Lemmy on a browser atm 😓








  • It really depends on the company that you use to manage the domain’s DNS. As long as they have an API to update DNS records…

    For example, I can have my domain at Porkbun and have its DNS managed at Cloudflare. Cloudflare allows updating DNS records via API…so there’s programs to update it. Some routers even support it.

    Worst case, you can set up a service like duckdns and have your domain, via cname, point to the duck DNS subdomain.

    There’s options.