RT @SAlexashenko: Met this guy at a conference, he gave me his card. Does anyone know if he's legit?

RT @a19grey: @Jason @DOGE @USPS Jason, the post office had a net income *gain* last quarter so how could it be a subsidized grift?. You see….

RT @sampullara: github down oof.

RT @concept_central: After much deliberation, I’ve decided on Flashlight and Camera

And it looks like GitHub has patched this. RIP profile backgrounds.

Confirmed. MathJax processes "fontfamily" by injecting it into a style tag! This means you can write a semicolon followed by arbitrary CSS. It looks like this was actually fixed last year: but GitHub must be using an old version.

MathJax says this gets rendered as the following:. However, when I tested the <mtext> element in isolation, it did not respond to arbitrary style commands in fontfamily. I think this must be a bug with MathJax's renderer using a style tag to represent font-family.

\unicode accepts a font-family argument!. However, we're putting a bunch of arbitrary CSS in instead.

It works by declaring a chemical formula using \ce. Inside, we have a \unicode macro which is a non-standard addition from MathJax:

The exploit:. \ce{$\unicode[x; color:red; pointer-events: none; z-index: 25; position: fixed; top: 0; left: 0; height: 100vh; object-fit: fill; width: 100vw; opacity: 1; background: url('); background-size: 100vw;]{x0000}$}.

A repository showcasing this:

GitHub bug allows you to display an image on top of your repository page!. I heard about this from and discovered that you can use it for overlays in addition to backgrounds!. But how does it work?

RT @FreyaHolmer: web dev stack overflow is always like:. Q: is there a way to florb arrays in js?. ✅[⬆️635]: Florbing will never happen. Br….

RT @typedfemale: curious.

RT @ylecun: OMG!.Toads with supertoadian vision will develop a taste for bees. Their population will explode as they devour all the bees. F….