PaulNM on 20 Sep 2017 22:04:40 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] OT: iTerm2 Leaks Everything You Hover in Your Terminal via DNS Requests


On 09/20/2017 11:30 PM, brent timothy saner wrote:
On 09/20/2017 10:47 PM, PaulNM wrote:


To be fair it wasn't about determining valid urls, but whether or not
there was a responding site at said url.

+1; this is something that can EASILY be done:

- without taking the time for a dns query (slow connection or resolvers?
gl;hf)
- without the LEAKING.

by simply using a regex for a URI. heck, being that it's (mostly) in
objC, tada:

https://stackoverflow.com/questions/7016957/checking-if-a-string-is-a-url-objective-c

totally offline parsing, no dependencies on external speed or
connection. (i believe this is how e.g. gnome-terminal handles
in-terminal link rendering, which is why you can even do things like
clicking on


You misunderstand what I wrote. Url parsing is quite simple, they follow specific patterns. Determining whether a website exists and responds at that location is another matter. The only way to tell that is to actually go there and ask, and you need DNS and an internet connection to do that.

For instance, "http://paulnmisabigdummy.biz"; is a perfectly valid url, but there's no site there. (Nor is the domain registered in this case.)

For some reason the iTerm folks wanted to test that a site was actually there first, rather then just highlighting it anyway.

-- PaulNM
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug