News for hackers. Stuff that matters.
Re:Deceptive example for malicious usage of .zip domain by DerekL on Thursday June 22, 2023 @07:06PM (#36440444)
How exactly does this trick work? Thing is, a URL can't have any non-ASCII characters in it. So this would only happen if the webpage or some app takes the URL and undoes the percent-encoding to try to make it more readable.
Re:Deceptive example for malicious usage of .zip domain by DerekL on Thursday June 22, 2023 @07:10PM (#36440481)
I just tried the fake URL by pasting it into Safari's address bar, and it “helpfully” percent-encoded the special slashes and tried to go to v1271.zip.