Wrote a little article on how i hacked a online club made with three.js
Enjoyyy
Wrote a little article on how i hacked a online club made with three.js
Enjoyyy
An interesting article. Thanks!
It occurs to me that the concept of a virtual dance club is so nerdy – even if it is introduced because of the pandemic, and its users prefer live parties – that, conceivably, many guests would see hackability more as a feature than as a bug. It shurely adds some (possibly much needed) unpredictability and flexibility to a “cold” environment. If all participants are aware of the risks, and agree to a few rules (i.e. don’t push binary executables or illegal content, and don’t overwhelm/crash the clients), I imagine it could be a pretty fun time for a group of nerds.
I don’t know how wise it is to reveal that you have left a client-side backdoor for XSS, while also seemingly revealing that it would be too revealing to reveal how it works…