<!DOCTYPE html><htmllang="en"><head><metacharset="UTF-8"><title>Blog | tait.tech</title><linkrel="stylesheet"href="/assets/css/style.css"><metaname="viewport"content="width=device-width, initial-scale=1.0"><metaname="author"content="Tait Hoyem"><metaname="keywords"content=""><metaname="description"content=""></head><body><divid="wrapper"><header><h1>tait.tech</h1><nav><ahref="/"class="nav-link">Home</a><ahref="/blog/"class="nav-link"class="on-page">Blog</a><ahref="/ideas/"class="nav-link">Ideas</a><ahref="/links/"class="nav-link">Links</a><ahref="https://github.com/TTWNO/"class="nav-link"target="_blank"rel="noopener noreferrer">Github</a></nav></header><main><h1>Blog</h1><article><header><h2class="post-title"><aclass="post-title-link"href="/2021/04/04/quiz-your-friends-xss/">The "Quiz Your Friends" XSS Exploit</a></h2><timeclass="post-date"datetime="21-04-04"> 04 April 2021 </time></header><divclass="post-excerpt"><p>Note: I have alerted the administrators of this site multiple times about this vulnerability. One email was sent many years ago, which is more than enough time for <ahref="https://en.wikipedia.org/wiki/Responsible_disclosure">responsible disclosure</a>.</p></div></article><article><header><h2class="post-title"><aclass="post-title-link"href="/2021/01/31/lichess/">Lichess Accessibility</a></h2><timeclass="post-date"datetime="21-01-31"> 31 January 2021 </time></header><divclass="post-excerpt"><p>I wanted to play chess with somebody who used a screen reader, without requiring a screen reader myself; some sites, like QuintenC’s Playroom have a rather poor visual interface for anyone who would like the play the game visually. <ahref="https://lichess.org">Lichess</a> is an free and open-source website for chess players; it bridges this gap by having two “modes” on the site: standard mode and accessibility mode.</p></div></article><article><header><h2class="post-title"><aclass="post-title-link"href="/2020/12/20/deploy-lichess/">How to Deploy Lichess's Lila With Nginx</a></h2><timeclass="post-date"datetime="20-12-20"> 20 December 2020 </time></header><divclass="post-excerpt"><p>I was getting ready to have a public test of some changes I made to <ahref="https://lichess.org">lichess.org</a>’s <ahref="https://lichess.org/source">open source chess platform</a>. In preperation, I got my Let’s Encrypt certificates and nginx configurations setup… and it wouldn’t work. Here are some tips for myself and future Lichess developers.</p></div></article><article><header><h2class="post-title"><aclass="post-title-link"href="/2020/12/14/orca-raspberry-pi-manjaro/">Orca, Emacspeak and Chromium Accessibility on A Raspberry Pi Running Manjaro ARM</a></h2><timeclass="post-date"datetime="20-12-14"> 14 December 2020 </time></header><divclass="post-excerpt"><p>I wanted to get a gift for my blind friend who has been interested in learning Linux for a while now. Just when I was about to start looking for something I decided to take a look at <ahref="https://lbry.tv/@Lunduke:e/raspberry-pi-400-looks-rad:c">Brian Lunduke’s newest video</a> featuring the <ahref="https://www.raspberrypi.org/products/raspberry-pi-400/?resellerType=home">Raspberry Pi 400</a>. The Raspberry Pi 400 has come full circle in terms of computing. It is a keyboard. All the computing is done from within the keyboard. Much like the Comodore64, this computer comes without a screen but is still technically fully functional without one. I had my ‘Aha!’ moment, and decided that the Raspberry Pi 400 would be a very cool present.</p></div></article><article><header><h2class="post-title"><aclass="post-title-link"href="/2020/12/01/pacaur-rpi/">Getting Pacaur Working on a Raspberry Pi 4 with Manjaro ARM or Arch Linux</a></h2><timeclass="post-date"datetime="20-12-01"> 01 December 2020 </time></header><divclass="post-excerpt"><p>I recently installed Manjaro ARM (based on Arch Linux ARM) on a Raspberry Pi 4. I used some standard comma