News for hackers. Stuff that matters.
Re:Chrome 69: “www.” subdomain missing from URL by feross on Thursday September 06, 2018 @06:02PM (#17930022)
This change goes far beyond merely hiding the "www." prefix. I'm not making up these examples:

1. "m.tumblr.com " and "tumblr.com " are BOTH displayed as "tumblr.com" even though they're literally different sites.

2. "www.example.www.example.com" displays as "example.example.com" which means all "www" subdomains, whether leading or not are being stripped out.

3. In the extreme case, "www.m.www.m.example.com" shows up as "example.com" which is pretty misleading.

Usually, the Chrome team is very thoughtful about decisions that impact security. I'm surprised this was released in such a half-baked state. I hope this is not an indication of how Google's plan to "kill the URL" will work out.

Re:Chrome 69: “www.” subdomain missing from URL by zbentley on Thursday September 06, 2018 @06:12PM (#17930086)
If true, that's seriously concerning from a "detecting visual-similarity domain hijacking" security perspective.
Re:Chrome 69: “www.” subdomain missing from URL by abalone on Thursday September 06, 2018 @06:39PM (#17930253)
FWIW the Chromium agrees that 2 and 3 are bugs and will fix them.[1]

1 is by design though. Remember that they are only partially hidden; when you focus on the address bar it reveals the true address.

[1] https://bugs.chromium.org/p/chromium/issues/detail?id=881410...

Re:Chrome 69: “www.” subdomain missing from URL by qu4z-2 on Thursday September 06, 2018 @10:17PM (#17931416)
My understanding is that it's not when you focus it but when you attempt to edit it, either via double clicking or by moving the cursor.