Lokesh Dhakar

Designing and building web apps and small games. Prev @square, @weebly, @getaround. Open source projects: Lightbox and Color Thief

[Lokesh Dhakar @lokesh]

@JSchwarz9 The business continues to grow consistently, though margins are down a bit, but it's a great business, and profitable.

If you're asking about the stock price, the business is still catching up. You could still argue that it's overpriced looking at standard fundamentals.

[Lokesh Dhakar @lokesh]

Oof, my account was part of this hack: https://t.co/BIEVIorcoE

Once they compromised my account, they changed the username and then set the profile age to under 13 to suspend the account. Locked me out entirely.

Meta/IG folks, help appreciated.

[André @oracles]

Today Instagram had this massive exploit where hackers were just stealing rare handles left and right. Hundreds of accounts gone.

People losing handles they’ve owned since 2010, some worth hundreds of thousands.

I own a few rare ones so I was actually stressed watching this happen in real time, which I haven’t been in years.

Obama White House account got hit.

These aren’t some random new accounts, these are verified, locked down accounts and they still got compromised.

The thing is the exploit is so simple it’s almost funny. Attacker goes to Forgot Password, says their account is hacked, turns on a VPN to match the target’s location (which now you can find on the about section of the page).

Instagram’s AI support flow asks them to verify with a selfie.

They grab a photo from the target’s profile, run it through an AI video generator to make an animation of the person’s face moving around, upload that to Meta’s AI as proof.

And Meta’s AI just accepts it because it can’t tell the difference between a real selfie and an AI-generated video of someone’s face
.
Once verified they change the email to theirs. Password reset link goes to their email. They own it now. 2FA gets bypassed somehow in the process but honestly I don’t know exactly how, just that it did.

Point is even locked down accounts went down.

Then you try to recover your account and you’re talking to a chatbot that has zero ability to help.

You can’t escalate to a human. You’re just stuck. Your asset is gone and there’s no one to call.

The whole thing just highlighted how stupid it is to automate account security without any human in the loop.

One AI fooling another AI while there’s literally no person anywhere to catch it.

Meta took hours to even acknowledge it while accounts were getting stolen every minute.

Now thankfully it’s patched but I don’t think it will be the last one. Stay safe!

[Lokesh Dhakar @lokesh]

Enjoyed the incredibly detailed step-by-step, with all the missteps along the way, write-up by Alex Harri on his ASCII renderer.

https://t.co/ciUBFwyamm

[Lokesh Dhakar @lokesh]

The 2006 original: https://t.co/BLhsqCh63z
The 2026 version: https://t.co/UelQKS03t5

[Lokesh Dhakar @lokesh]

I wrote the original Lightbox script in 2006! It's been a while.

Lightbox3 is a complete rewrite. Still just one HTML attribute to get started, but the interactions are entirely different: spring physics, pinch-to-zoom, swipe-to-dismiss, fluid morph transitions.

[AA @measure_plan]

i made tetris but the board and pieces are attached to your body and it's quite tiring to play

[Lokesh Dhakar @lokesh]

--json # Full color data as JSON
--css # CSS custom properties
--count 5 # Number of palette colors (2-20)
--quality 1 # Sampling quality (1 = every pixel)
--color-space rgb # Quantization space (rgb or oklch)

More info at: https://t.co/LvzrQ1bqPo

[Lokesh Dhakar @lokesh]

CLI support for Color Thief!

[Lokesh Dhakar @lokesh]

Try it for yourself here:
https://t.co/iUhWTIwWAb

🎨

[Lokesh Dhakar @lokesh]

I just shipped Color Thief v3. Biggest update for the project by far.

Complete rewrite. New API. New site.

My fave features: observe() for live video palette extraction, OKLCH perceptual quantization, and rich Color objects for hex, HSL, & WCAG contrast out of the box.

[Lokesh Dhakar @lokesh]

@openlibrary Check it out here:
https://t.co/DRACVmE23T

[Lokesh Dhakar @lokesh]

Worked on something alongside @openlibrary, a digital bookshelf generator. It was a fun one!

[Lokesh Dhakar @lokesh]

@IamIronLAN People saying “this is shady” should be saying “this is not for me”.

[Lokesh Dhakar @lokesh]

https://t.co/hZU3Ych0qJ

[Lokesh Dhakar @lokesh]

The Annual Ghost Town Pumpkin Festival is almost over. Get in the Halloween spirit and carve a pumpkin!

[Lokesh Dhakar @lokesh]

@vanlancker @untitleddotnew Link please. Thanks!

[Lokesh Dhakar @lokesh]

App wil help you fetch your check-ins and get them into iCalendar format for ingesting with your calendaring app of choice.
https://t.co/b4uzcCYShf

[Lokesh Dhakar @lokesh]

For the few of us hold outs still using @SwarmApp / @Foursquare , I put together a utility to get your check-ins in your calendar. Great way to recall a trip from last year or last weekend.

Link below.

[Lokesh Dhakar @lokesh]

@zachklein https://t.co/fOjrFJRTYi

[Lokesh Dhakar @lokesh]

Incredible way to scrub through history and connect dots in your understanding:
https://t.co/RbKHW6saKF

[Lokesh Dhakar @lokesh]

@justinrgraham Often a Hiroshi Yoshimure album:
https://t.co/ZKikKsoisO