News for hackers. Stuff that matters.

A comment on URL obfuscation (2002). Parent comment

Re:URL obfuscation (2002) by jaimex2 on Saturday August 12, 2017 @08:48PM (#15000907)
Strange, it still works for me on Chrome on a http site.
[ Parent | on HN ]
Re:URL obfuscation (2002) by theEXTORTCIST on Saturday August 12, 2017 @11:20PM (#15001316)
I just tried this on Chrome 60.0.3112.90. Both Firefox and Safari throw phishing warnings with these URLs.

http://news.ycombinator.com@1572395042 Chrome takes me to 93.184.216.34 no warning

Then I tried http://security.wellsfargo.com@customerLoginv=ar3351RandomDa...

Which stretches way past my laptops viewable URL bar... and it takes me right to badsite.null (or a valid site like example.com). If you need HTTPs you can redirect on badsite.null's web server. Very wild.

[ Parent | on HN ]