News for hackers. Stuff that matters.

A comment on Hacking GitHub's Auth with Unicode's Turkish Dotless 'I'. Parent comment

Re:Hacking GitHub's Auth with Unicode's Turkish Dotless 'I' by _jg on Tuesday December 17, 2019 @02:02AM (#21811337)
Should be: 'John@Gıthub.com'.toUpperCase() === '[email protected]'.toUpperCase()
[ Parent | on HN ]
Re:Hacking GitHub's Auth with Unicode's Turkish Dotless 'I' by stedaniels on Tuesday December 17, 2019 @04:55AM (#21812154)
The example doesn't seem to work at all for GitHub's explanation.. they say that their outgoing email server didn't support unicode in the domain part anyway. What am I missing? Was your actual attack on the local part?
[ Parent | on HN ]