✨ Meet blossy
The easiest way to make custom blossom servers come to life.
Think blossom server that support ecash, WoT gating and more.
All so easy to use that your LLM is going to one-shot it (probably 😝).
Login to reply
Replies (5)
Yes!
👀
Bit hard to follow on Macbook air btw. Next time please zoom in a bit 😉.
👀
Example of the replay attack.
- Alice wants to change her blossom server from Server 1 to Server 2
- Alice mirrors all blobs to Server 2
- Alice then sends a DELETE for all her blobs on Server 1
- Server 1 is malicious and replays all the DELETEs( with all the Auth events) to Server 2
- Result is a complete data loss
The Auth scheme is being reworked by @hzrd149 and I so it will be fixed