It seems that this program will not verify whether the account binding is performed by the user.
PoC: https://crossbell.io/notes/10-214
It is recommended to use signature to verify the identity of the operator.

As requested in discord channel.

Problem Description

I use the xSync service to sync all messages in my Telegram Channel "Yu's Life" (t.me/psedoyulife) to the Crossbell Blockchain.

The xSync service works well for regular messages, but when I reply to(quote) a message in the channel, there are some formatting issues in the synced content displayed on xChar and xFeeds.

The original content is

其实村上的随笔或是文集算是很好读的那种，言辞带些犀利却也同样带着些娓娓道来的真诚与别样韵味，像是对话，却也时常被埋在其中似乎带着些雕琢的幽默感逗得不禁莞尔。

总共大概花了三个月才真正看完，作为手头上为数不多的纸质书，更多的是想起时随便翻翻。

第一次去猫舍的时候虽然心动，却也本没有太下定决心那么快承担这样的责任，而路上随手翻起的一页里写道

“当时我们过着非常节俭的斯巴达式的生活。家里既没有电视也没有收音机，甚至连一只闹钟都没有。也几乎没有取暖设备，寒夜里只好紧紧搂着家里养的几只猫咪睡觉。猫咪们也使劲往我们身上贴过来。“

短短几句，却构成了我当下把猫带回家的最大动力。也谈到了许多，关于爱好、写作目的、创作思路与平衡，都是近两个月慢慢沉静下来才真正能够稍理解些的。

The displayed synced content is

   <p><span class="emoji">📖</span> 读过我的职业是小说家 #douban #read  https://book.douban.com/subject/26889236/</p>
                            </blockquote><p>其实村上的随笔或是文集算是很好读的那种，言辞带些犀利却也同样带着些娓娓道来的真诚与别样韵味，像是对话，却也时常被埋在其中似乎带着些雕琢的幽默感逗得不禁莞尔。<br><br>总共大概花了三个月才真正看完，作为手头上为数不多的纸质书，更多的是想起时随便翻翻。<br><br>第一次去猫舍的时候虽然心动，却也本没有太下定决心那么快承担这样的责任，而路上随手翻起的一页里写道<br><br>“当时我们过着非常节俭的斯巴达式的生活。家里既没有电视也没有收音机，甚至连一只闹钟都没有。也几乎没有取暖设备，寒夜里只好紧紧搂着家里养的几只猫咪睡觉。猫咪们也使劲往我们身上贴过来。“<br><br>短短几句，却构成了我当下把猫带回家的最大动力。也谈到了许多，关于爱好、写作目的、创作思路与平衡，都是近两个月慢慢沉静下来才真正能够稍理解些的。</p>

Related Account

The Crossbell address affected by this issue is 0xb461c1521eE9D96a9C950337f0851b79bD66CAe1.

Screenshots

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• fix(deps): update module github.com/mmcdole/gofeed to v1.3.0
• fix(deps): update module github.com/crossbell-box/contracts.go to v2
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• fix(deps): update module github.com/gin-gonic/gin to v1.9.1 [security]
• fix(deps): update module github.com/lib/pq to v1.10.9
• fix(deps): update module gorm.io/driver/postgres to v1.5.6
• fix(deps): update module gorm.io/gorm to v1.25.7
• fix(deps): update module github.com/johanneskaufmann/html-to-markdown to v1.5.0
• fix(deps): update module github.com/rabbitmq/amqp091-go to v1.9.0
• fix(deps): update module github.com/redis/go-redis/v9 to v9.5.1
• fix(deps): update module go.uber.org/zap to v1.27.0
• chore(deps): update actions/checkout action to v4
• chore(deps): update github/codeql-action action to v3
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

• Check this box to trigger a request for Renovate to run again on this repository

Problem Description

The issue is with the xSync service, which is used to bind a jike account(or other platforms) to sync content to the crossbell blockchain.

I encountered a problem when I put the wrong username (actually display name @pseudoyu instead of the required jike id) while binding my account, but the binding still succeeded.

The result is that the wrong username (@pseudoyu) is now displayed on their xChar profile and I'm unable to unbind or delete it.

Related Account

The Crossbell address affected by this issue is 0xb461c1521eE9D96a9C950337f0851b79bD66CAe1.

Screenshots

Problem Description

When using xSync service to sync tweets to Crossbell blockchain, formatting errors occur in quoted retweets. Two links are added to the retweet content, but they are not displayed on Crossbell (both xChar and xFeeds).

The original tweet url is: https://twitter.com/pseudo_yu/status/1622861342372941824

The original content is:

真的很快！我之前折腾过一个无边框美化方案，而且可以通过一些黑科技把 Command+D 分屏，Command+T 开新 Tab 这些通用快捷键结合 Tmux 里也能用，折腾性很强，早就作为默认终端了。

教程：https://www.pseudoyu.com/zh/2022/07/10/my_config_and_beautify_solution_of_macos_terminal/

dotfile：https://github.com/pseudoyu/dotfiles/blob/master/alacritty/alacritty.yml

<Original Tweet>

The displayed synced content is:

真的很快！我之前折腾过一个无边框美化方案，而且可以通过一些黑科技把 Command+D 分屏，Command+T 开新 Tab 这些通用快捷键结合 Tmux 里也能用，折腾性很强，早就作为默认终端了。

教程：

dotfile：



Tw93: #工程师工具 最近发现一个性能很好的终端叫做「Alacritty」，传说中最快的终端，基于 Rust 使用 OpenGL 加速同时支持跨平台，只有 5M 大小，不过是真的丑，上周末想着要是我来做应该是什么样子，于是乎就改良了一番，最后效果还不错，已成默认终端，写了一篇教程记录了下。
🤖
 https://tw93.fun/2023-01-25/alacritty.html

Related Account

The Crossbell address affected by this issue is 0xb461c1521eE9D96a9C950337f0851b79bD66CAe1

Screenshots