Quartz sync: Jul 12, 2026, 5:57 PM

.obsidian/community-plugins.json

@@ -2,6 +2,5 @@
   "dataview",
   "quartz-syncer",
   "obsidian-style-settings",
-  "obsidian-excalidraw-plugin",
-  "make-md"
+  "obsidian-excalidraw-plugin"
 ]

.obsidian/plugins/make-md/data.json

@@ -1,117 +0,0 @@
-{
-  "newNotePlaceholder": "Untitled",
-  "defaultInitialization": false,
-  "navigatorEnabled": true,
-  "filePreviewOnHover": false,
-  "blinkEnabled": true,
-  "datePickerTime": false,
-  "imageThumbnails": false,
-  "noteThumbnails": false,
-  "spacesMDBInHidden": true,
-  "cacheIndex": true,
-  "spacesRightSplit": false,
-  "contextEnabled": true,
-  "spaceViewEnabled": true,
-  "saveAllContextToFrontmatter": true,
-  "autoOpenFileContext": false,
-  "activeView": "/",
-  "hideFrontmatter": true,
-  "activeSpace": "",
-  "defaultDateFormat": "MMM dd yyyy",
-  "defaultTimeFormat": "h:mm a",
-  "spacesEnabled": true,
-  "syncFormulaToFrontmatter": true,
-  "spacesPerformance": false,
-  "currentWaypoint": 1,
-  "enableFolderNote": true,
-  "folderIndentationLines": true,
-  "revealActiveFile": false,
-  "spacesStickers": true,
-  "spaceRowHeight": 29,
-  "mobileSpaceRowHeight": 40,
-  "bannerHeight": 200,
-  "spacesDisablePatch": false,
-  "folderNoteInsideFolder": true,
-  "folderNoteName": "",
-  "sidebarTabs": true,
-  "showRibbon": true,
-  "vaultSelector": true,
-  "deleteFileOption": "trash",
-  "expandedSpaces": [
-    "/",
-    "//content",
-    "content",
-    "content/content/thoughts",
-    "content/content/tv",
-    "content/content/movies",
-    "content/content/hopefully helpful",
-    "content/content/assets"
-  ],
-  "expandFolderOnClick": true,
-  "spacesFolder": "Tags",
-  "suppressedWarnings": [],
-  "spaceSubFolder": ".space",
-  "hiddenFiles": [],
-  "hiddenExtensions": [
-    ".mdb",
-    "_assets",
-    "_blocks"
-  ],
-  "inlineBacklinks": false,
-  "inlineContext": true,
-  "inlineBacklinksExpanded": false,
-  "inlineContextExpanded": true,
-  "inlineContextProperties": true,
-  "inlineContextSectionsExpanded": true,
-  "banners": true,
-  "inlineContextNameLayout": "vertical",
-  "spacesUseAlias": false,
-  "fmKeyAlias": "aliases",
-  "fmKeyBanner": "banner",
-  "fmKeyColor": "color",
-  "fmKeyBannerOffset": "banner_y",
-  "fmKeySticker": "sticker",
-  "openSpacesOnLaunch": true,
-  "indexSVG": false,
-  "readableLineWidth": true,
-  "autoAddContextsToSubtags": true,
-  "releaseNotesPrompt": 0.999,
-  "enableDefaultSpaces": true,
-  "showSpacePinIcon": true,
-  "experimental": false,
-  "systemName": "paxad",
-  "defaultSpaceTemplate": "",
-  "selectedKit": "default",
-  "actionMaxSteps": 100,
-  "contextPagination": 25,
-  "skipFolders": [],
-  "skipFolderNames": [],
-  "enhancedLogs": false,
-  "basics": true,
-  "basicsSettings": {
-    "flowMenuEnabled": true,
-    "markSans": false,
-    "makeMenuPlaceholder": true,
-    "mobileMakeBar": false,
-    "mobileSidepanel": false,
-    "inlineStyler": true,
-    "inlineStylerColors": false,
-    "inlineStylerSelectedPalette": "",
-    "editorFlow": true,
-    "internalLinkClickFlow": false,
-    "internalLinkSticker": false,
-    "editorFlowStyle": "minimal",
-    "menuTriggerChar": "/",
-    "inlineStickerMenu": true,
-    "emojiTriggerChar": ":",
-    "flowState": false
-  },
-  "firstLaunch": true,
-  "notesPreview": false,
-  "editStickerInSidebar": true,
-  "overrideNativeMenu": false,
-  "onboardingCompleted": false,
-  "contextCreateUseModal": false,
-  "homepagePath": "",
-  "mobileMakeHeader": false
-}

.obsidian/plugins/make-md/manifest.json

@@ -1,10 +0,0 @@
-{
-  "id": "make-md",
-  "name": "make.md",
-  "version": "1.3.4",
-  "minAppVersion": "0.16.0",
-  "description": "make.md gives you everything you need to organize and personalize your notes.",
-  "author": "make.md",
-  "authorUrl": "https://www.make.md",
-  "isDesktopOnly": false
-}

content/fnn/.space/def.json

@@ -0,0 +1 @@
+{"_joins":[],"_contexts":[],"_links":[],"_sort":{"field":"rank","asc":false,"group":false,"recursive":false},"_template":"","_templateName":"","defaultSticker":"","defaultColor":"","readMode":false,"fullWidth":false}

content/fnn/TailTag App Discussion.md

@@ -0,0 +1,61 @@
+---
+aliases:
+  - tailtag
+tags:
+  - furry
+  - AI
+  - vibe-coding
+publish: false
+---
+several online sources have indicated that the recently popular Pokémon GO-like app "[TailTag](https://www.playtailtag.com)" has been breached and had user information leaked to the public internet. 
+
+> props & excellent thread discussing this incident: https://bsky.app/profile/highlysuspect.agency/post/3mqhuc6bwds2r
+
+users were first made aware of the breach when they received a strange push notification from the app titled "IMPORTANT ANNOUNCEMENT" with the message body consisting primarily of "meows" and other cat noises. 
+
+![the notification in question](https://cdn.bsky.app/img/feed_fullsize/plain/did:plc:ulpgvc4gwpwrkyojtvkgp6bx/bafkreigbvhubsqqjvshaooffh543vbruyehxuyn6xam4tyvyayf6usy7ey)
+
+Finn's response:
+
+![finn's response](https://x.com/FinnThePanther/status/2076144492558872939)
+
+![second response](https://x.com/FinnThePanther/status/2076237596028723583)
+
+twitter user **@twnlink** did a lot of digging on this and discovered some rather alarming configuration errors:
+
+![](https://x.com/twnlink/status/2076177625433731536)
+
+twitter user [**@Benaclejames**](https://x.com/Benaclejames) posted the following technical write-up of the vulnerabilities discovered on their Notion page: https://app.notion.com/p/TailTag-Vulnerabilities-39bd16d9d17180fa9279ec92bbe19549
+
+[**@FloppyMinty**](https://x.com/FloppyMinty) was able to confirm the app's backend information was still publicly accessible as of 11AM EDT on June 12th.[^2][^6] While no user passwords were compromised, just about every other bit of personally identifiable information that users entered into the application is publicly accessible. With proper tools, a malicious actor could view information uploaded to the application in real-time and could theoretically then determine the physical location of specific users and/or the fursuiters they photograph.[^1]
+
+on July 12, 2026, Finn posted the following response:
+
+> On July 11, 2026, an unauthorized individual created several TailTag accounts and exploited an overly permissive profile-access rule to retrieve their full user profile records via the publicly accessible TailTag domain. This profile-access rule, originally designed so you could see the profile of whose fursuit you caught, included general profile information, along with account and app preferences, and technical identifiers used to deliver push notifications. In addition, a separate control requiring server authorization before notifications could be delivered that was assumed to be on by default had not been enabled. Together, these issues allowed the individual to send an unauthorized notification that appeared to come from TailTag itself. Once the incident was identified, I disabled all notification delivery, enabled the additional authorization requirement, rotated the relevant credential, blocked the accounts involved, revoked their sessions, and restricted profile access. Based on my investigation, I found no evidence that passwords or login credentials were accessed or that the individual gained access to other users' accounts to remove or otherwise manipulate user data. Notifications remain disabled while I complete longer-term security improvements.
+> 
+> As benign as the notification content was, this was still a serious design oversight that will not be taken lightly, and I personally apologize for both the unintended app behavior, but more importantly, the loss of trust in the security of TailTag. I got caught up in the excitement of getting this project out for all of you to play that I overlooked some important details regarding account access control that resulted in this compromise. I suggest changing your password if you haven't already and be wary of any emails that look suspicious or ask for you to log in with TailTag credentials. If you choose to delete your account due to this, your data will be removed with no questions asked. 
+> 
+> I am still confident in the value that TailTag brings to the community and do not have any immediate plans to shut it down. However, I will be moving much more carefully in its development, including pausing any feature work until I am confident in account security. If you have any questions, please reach out and I will answer them for you. 
+> 
+> Many valuable lessons were learned this weekend. I will be doing my best to not only prevent something like this from happening again, but to gain your trust back for this project. [^3]
+> 
+> \[in later tweets in reply to this original image post]:
+> If you would like to assist with future security, access control, or any other parts of the app, please reach out. I am happy to discuss how you can help.[^4]
+
+In the interim, TailTag has been **taken offline** until further notice.[^5]
+
+most of the comments in response to Finn's own statement were questions about the amount of AI assistance used in the creation of the app. Finn did say "LLMs were involved in the implementation of designs \[he] wrote in English."[^7]
+
+[^1]: @BenacleJames: *TailTag Vulnerabilities* - https://app.notion.com/p/TailTag-Vulnerabilities-39bd16d9d17180fa9279ec92bbe19549
+
+[^2]: @FloppyMinty: "PSA: If you used TailTag, your email among other metadata has been compromised." https://x.com/FloppyMinty/status/2076320147233493306
+
+[^3]: @FinnThePanther, X: "About yesterday's incident." https://x.com/FinnThePanther/status/2076351285415276672
+
+[^4]: https://x.com/FinnThePanther/status/2076351646662345102
+
+[^5]: https://x.com/FinnThePanther/status/2076401056414900312
+
+[^6]: Finn said "the fix should have addressed this as well" a [couple of hours later](https://x.com/FinnThePanther/status/2076357929083801789)
+
+[^7]: https://x.com/FinnThePanther/status/2076378180840239389

content/fnn/fnn.md

@@ -0,0 +1,5 @@
+---
+publish: true
+---
+
+idk. someone's gotta write this shit down, eh?

quartz.config.yaml

@@ -98,7 +98,7 @@ plugins:
       renderEngine: katex
     order: 80
   - source: github:quartz-community/citations
-    enabled: false
+    enabled: true
     order: 85
   - source: github:quartz-community/hard-line-breaks
     enabled: true