News for hackers. Stuff that matters.

A comment on Chrome 69: “www.” subdomain missing from URL.

Re:Chrome 69: “www.” subdomain missing from URL by normo12 on Friday September 07, 2018 @08:10AM (#17933616)
Suddenly "www.com"'s value has skyrocketed in the eyes of scammers. How about:

* login.<target_site>.www.com -> login.<target_site>.com

* members.<target_site>.www.com -> members.<target_site>.com

Even some carefully chosen <target_site>.www.com's will now be valuable:

* login.www.<target_site>.www.com -> login.<target_site>.com

What a stupid idea...

[ Parent | on HN ]
Re:Chrome 69: “www.” subdomain missing from URL by Ajedi32 on Friday September 07, 2018 @09:56AM (#17934231)
That's just a bug which I'm sure will be fixed in the next release.

For this to actually help scammers (after the bug is fixed) they'd need to own www.example.com but not example.com, which is unlikely to say the least.

[ Parent | on HN ]
Re:Chrome 69: “www.” subdomain missing from URL by normo12 on Friday September 07, 2018 @10:37AM (#17934554)
Yes, it is a bug, but until it's fixed it's a potential attack vector.
[ Parent | on HN ]