About this site

Hi, I'm Meg. This blog is designed to give me an opportunity to share some of the Information Security, technology or art stuff I do in my spare time.

Comments

Post a Comment

Comments are always lovely, just don't forget to be nice!

Popular posts from this blog

Interrailing in North Macedonia is a scam - Why you should buy a train ticket instead

Image
Last year I saw a deal for an Interrail pass for a country I knew basically nothing about, called North Macedonia. It looked like the railway network was decent judging by the website, they had some very cool looking old trains, and the pass was only €35, which seemed like a great deal. I did try and find some information from other people who'd used the pass, and I couldn't find anyone talking about it. After having used the pass, I wanted to share some information that I thought could be helpful to fellow travellers who might be considering the pass. The interrail website is extremely misleading about North Macedonia's rail network If you looked at the map on the interrail website, you might think that North Macedonia had a pretty good rail network! It covers off the main tourist spots (Skopje, Bitola, Kicevo and Ohrid) after all, and it looks like there are some cool connections between cities - for example getting between Kicevo and Prilip is pretty handy.  The problem ...
Read more

Google account cookie theft via blogspot

Image
Intro Hi all, I'm going to run through this as I do it. That's because, even if it doesn't work on , I don't think this is a bad idea per se. It could work on other sites similar to blogspot that allow you to directly edit HTML and add scripts to a site with external cookies on them. If this comes to an abrupt end, then I'll definitely try some of those. I'm also pretty sure this has limited use see. Idea After seeing some examples of XSS being used to steal sessions. Now XSS is usually used to steal the cookies of someone else's site, but I had a thought - what stops you from stealing other website's cookies on your website, from other websites. For example, if you have a google account cookie on your blog, can you steal that? This has probably been thought of before, and it has probably been thought of. However, I feel like knowing something has been done before, or knowing that it isn't possible, can often get in the way of a good learning experie...
Read more

A brief writeup of @BlownlyFans, the biggest waste of time of my life so far

Image
On Monday the sixth of April I made a brief joke about the website onlyfans. The done-to-death funny and original joke was basically “What if onlyfans lived up to its name and was solely dedicated to fans of the ‘air go speedy’ kind?” I then thought “You know what , I could make a twitter bot for this.” And so began my four day journey into insanity, all in the name of a joke that isn’t actually funny. So, the program begins by importing a whole load of stuff. I don’t know what is necessary and what isn’t anymore, but to be honest I don’t want to. Tweepy is the library I use to make requests to the twitter API, requests is used to get the URL of an image from the quant API time is used to wait for a bit, and PIL and IO are used to save images. The code Down below is doing all the basic stuff. I set the name of the image to egg.jpg for no reason other than I wanted the image to have the same name each time. Sometimes the image won’t convert to a jpeg, but if it doesn’t it’ll ...
Read more