🔜 BAW, MIR

@tallglassofoj.org

Same old OJ, great new taste • Atlanta • https://tallglassofoj.org This is a gay bondage and kink fetish profile; all content here is 🏴 flagged as pornography • Do not interact if you are under 18 🔞

I found myself a Spidy84m (on X) hogtied on my couch, wearing a tight Amoresy suit. He struggled for a while and couldn't talk much. At this point he had given up although I wanted to keep him like this a while longer 😜😈

looks like its time to update da rules again: 1. Don't start a business making kink gear (unless you KNOW what you're getting into) 2. Don't use AI content for ANYTHING and introducing #3: 3. Don't trademark widely used phrases

For the crime of bringing to recon's attention the extent of their platform's security issues and creating a proof of concept for how those issues can be exploited, recon has banned my account.

Right, Recon uploads your images to a CDN storage bucket, probably S3, and makes the files name a UUID v4. These are, as far as I know, reasonably private and very difficult to enumerate. They could proxy the requests through an auth layer or request signed-urls, but this passes my smell test.

Dave K 🔜 PSLP@stiefelkopp.bsky.social · last mo.

Hey quick question, if you're not currently logged into recon and you copy and paste this URL from one of my galleries into your browser, what happens? media.recon.t101api.com/profiles/43b...