The thing I find interesting is that this wasn't a random discovered; like, you look at the first commit in the sequence and you'll see.
> \ce{$\unicode[goombafont; color:red; pointer-events: none; ...
ie. This isn't some random chance discovery.
This is someone looking to use a specific exploit with the ```math tag, already certain that there's some way of doing it.
How strange.
- the history can be rewritten, with push --force. The author might have iterated by force pushing one commit
- The author could have discovered it by change in a private repository, or another repository that they deleted
So in general, yes, but in this case, I doubt it. I’m pretty sure this git history is a real and true log of them dicking about trying to get the exploit they saw on twitter working.
…but, I guess, you could be right. /shrug
it was found by a bunch of anime-pfps on twitter and went "viral"
I think you mean “infosec professional”
But the rescue murloc is cute.
I get this in what looks like an error box
> Extra open brace or missing close brace
$600 for a low seems pretty good to me.
(Injection in LaTeX math tags)
https://news.ycombinator.com/item?id=40614571
but that one of course stopped working too
working snapshot (mildly nsfw):
https://web.archive.org/web/20240607215223/https://github.co...
there's another one from 2 hours earlier but that misses the cool rotating cube.