This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
Andrew Lilley Brinker
alilleybrinker.com
did:plc:geozyv62fx63m7jhr4eraubc
Why was this code ever shipped?!
This is from the second vuln, where keys' signatures aren't checked before they're stored in the trusted key store.
Why would you ever ship a "TODO, actually validate signatures lol" in your secure messenger?!
2026-01-28T18:38:11.198Z