🦴 Wolf Anubite 🦴

@wolf-anubite.bsky.social

A Deathly Devourer Vtuber & Twitch Streamer. She/Her. #Vtuber #Streamer #ENVtuber 🔞 All info (inc model info) is on my Twitch or Carrd! I don't take commission DMs, I DM who I want to hire. https://wolfanubite.carrd.co/

I'm 2 Bsky drafts deep dissolving into what I'll honestly describe as desperate begging I NEED y'all - including friends - to stop calling me They It's been 2 years of me trying to get people to stop. I'm out of ideas and I don't think I can pretend it's not affecting me as badly as it is anymore

Okay a tiny thread because people are going to freak out: This exploit in particular takes advantage of a special command that renders images (via attribute escape). If you have an overlay that processes images (most don't) then yes, this is your problem. Overlay must explicitly create img DOM.

A picture of the exploit, using a command that explicitly includes an image file extension, but also would escape out of the src attribute of an image such than an onerror attribute can be added to the img tag. This onerror attribute can run explicit javascript immediately.

Default behavior for most chat widgets is if you have an image it will not attempt to modify image links into actual HTML image tags. Your overlay/overlay service must explicitly be doing this for you.

⚠️ New Twitch Email Scam.⚠️ Do not be fooled by an email claiming to be "Twitch Automated Audio Detection Systems" that asks you to verify your rights to use audio.

BildBild

⚠ PSA to artists and clients on #VGen about a Discord scam going around!! ⚠ a scammer is scraping profiles (both artists and clients) to make fake discord accounts impersonating them, then reaching out to people they've worked with in the past who have their discord info publicly visible