News for hackers. Stuff that matters.

SethMLarson

Author here, that's a good idea. A straightforward way to exploit an implementation differential like this is if you have a software system that contains two different implementations of IDNA 2003 processing user input. One part of the process processes the domain correctly, the other incorrectly, and in this case you can have one part of a system (such as a policy/filter) "see" the data one way and the other part of the system (such as, taking an action as a result of the data) see the data in another way.

Server-side Request Forgery (SSRF) is an example of such an exploit targeting a differential in implementations of URL parsers, which is similar to this implementation difference.

Re:Postmortem: TanStack npm supply-chain compromise on Monday May 11, 2026 @08:56PM (#48102858)
pip also supports relative dependency cooldowns starting in v26.1:

~/.config/pip/pip.conf

[install] uploaded-prior-to = P3D

Re:The Frog for Whom the Bell Tolls on Tuesday May 05, 2026 @11:06AM (#48023548)
Woah, that's awesome!! Enjoy :)
Re:The Frog for Whom the Bell Tolls on Tuesday May 05, 2026 @11:04AM (#48023519)
You'll have to play to find out ;) haha!
Re:"Food JPEGs" in Super Smash Bros. & Kirby Air Riders on Sunday January 11, 2026 @05:55PM (#46581336)
Great suggestion, I'll add an example!
Re:"Food JPEGs" in Super Smash Bros. & Kirby Air Riders on Sunday January 11, 2026 @05:55PM (#46581328)
Great eye to detail! Thank you: ill fix this when I get home :)
Re:"Food JPEGs" in Super Smash Bros. & Kirby Air Riders on Sunday January 11, 2026 @01:32PM (#46578279)
Maybe I'll do a follow up on this!
Re:"Food JPEGs" in Super Smash Bros. & Kirby Air Riders on Sunday January 11, 2026 @01:32PM (#46578275)
Oooh! I need to look into this... thanks for the tip.
Re:"Food JPEGs" in Super Smash Bros. & Kirby Air Riders on Sunday January 11, 2026 @09:36AM (#46576097)
Players that don't know the technical term "billboarding" might use this as a way to say that the images of the food are "flat" unlike the rest of the 3D modeled environment. Just a suspicion!
Re:"Food JPEGs" in Super Smash Bros. & Kirby Air Riders on Sunday January 11, 2026 @09:34AM (#46576079)
I would love to see a list of inspirations for keeping the food 2D even in a 3D environment! Pacman or Bubble Bobble seem like good places to start.
Re:Deprecations via warnings don't work for Python libraries on Monday December 08, 2025 @01:46PM (#46196064)
Author here! Agreed that are different levels of "engaged" from users, which is okay. The concerning part of this finding is that even dependent users that I know to be highly engaged didn't respond to the deprecation warnings, so they're not working for even the most engaged users.
Re:Blogrolls Are the Best(rolls) on Thursday November 13, 2025 @04:26PM (#45920786)
That's awesome to hear you've been inspired :)
Re:Instant Checkout for Merchants in ChatGPT on Monday September 29, 2025 @10:52PM (#45421439)
Re:SCREAM CIPHER ("ǠĂȦẶAẦ ĂǍÄẴẶȦ") on Sunday September 21, 2025 @08:58AM (#45322319)
<3 Thanks for the kind words!! :)
Re:SCREAM CIPHER ("ǠĂȦẶAẦ ĂǍÄẴẶȦ") on Saturday September 20, 2025 @01:56PM (#45315618)
NICE!!
Re:SCREAM CIPHER ("ǠĂȦẶAẦ ĂǍÄẴẶȦ") on Saturday September 20, 2025 @09:22AM (#45313154)
OP here, I either didn't know or completely forgot this XKCD existed and it resurfaced as a good idea haha! Time to update the post lol
Re:New Mexico is first state in US to offer universal child care on Tuesday September 09, 2025 @11:04AM (#45182910)
This is really great!!!
Re:Draft SMS and iMessage from any computer keyboard on Friday August 29, 2025 @10:34AM (#45064663)
I'm an iPhone owner, but don't have a MacBook. I am seriously jealous of being able to send text messages with a laptop... hence this tool hah
Re:Draft SMS and iMessage from any computer keyboard on Friday August 29, 2025 @10:11AM (#45064385)
Hey all, author here! Happy to answer questions anyone has :)

Older »