Top all-time · #16205
eng.getwisdom.io
Company blog · eng.getwisdom.ioprogrammingsecurity
eng.getwisdom.io is the company blog at eng.getwisdom.io, writing about programming and security. Since 2019, 4 different Hacker News readers have linked it 4 times, most often “Hacking GitHub's Auth with Unicode's Turkish Dotless 'I'”. No feed was found, so read it on the site itself.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN readers cite this post for the 'Hacking GitHub with Unicode's dotless i' write-up, which shows how Unicode uppercasing can make different strings collide, such as email addresses. Commenters link it as background.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Hacking GitHub's Auth with Unicode's Turkish Dotless 'I'3 people · 3 mentions · first linked 2019-12-17
What Hacker News says?
A somewhat surprising and interesting side effect of this can be found in the blog post "Hacking GitHub with Unicode's dotless i" [1], which is now fairly well known. [1] https://eng.getwisdom.io/hacking-github-with-unicode-dotless...
Comment linking /hacking-github-with-unicode-dotless-i/
on “TIL the assumption that string length does not change when upper-cased is false”Submitted Hacking GitHub's Auth with Unicode's Turkish Dotless 'I' as a story · 370 points
HN discussionThis the same as the unicode email collision that was found in GitHub the other day: https://news.ycombinator.com/item?id=21809390 https://eng.getwisdom.io/hacking-github-with-unicode-dotless... It makes you wander how wide spread this vulnerability could be with two independent implementations found so far. I’m guessing this was found when someone audited the Django email comparison code after reading about the Gut…
Comment linking /hacking-github-with-unicode-dotless-i/
on “Django security releases issued: 3.0.1, 2.2.9, and 1.11.27”Submitted Postgres HyperLogLog Extension as a story · 1 points
HN discussion