Beefy Boxes and Bandwidth Generously Provided by pair Networks
XP is just a number
 
PerlMonks  

New user's name contains utf...

by bliako (Priest)
on Jan 13, 2019 at 20:52 UTC ( #1228490=monkdiscuss: print w/replies, xml ) Need Help??

I have spotted a new user with name p&#2662;j. This is p-<Gurmukhi Digit Zero>-j (http://www.codetable.net/decimal/2662) which is similar to poj. Has it requested for a password change?

re: spotify hack: https://labs.spotify.com/2013/06/18/creative-usernames/

bw, bliako

Replies are listed 'Best First'.
Re: New user's name contains utf...
by Corion (Pope) on Jan 14, 2019 at 08:55 UTC

    No. That user name does not contain UTF-8. It looks like an HTML-escape, since Perlmonks converts all usernames that don't really fit into ASCII into their plaintext &#xxxx; equivalents and renders these explicitly. Trying to register a name with a homoglyph will instead create a name containing the appropriate ampersand escape. Ampersand-escapes are always rendered with a visible ampersand and not passed through.

    See also tye&nbsp;.

      Beauty is in the eye of the beholder: The news reader I'm using to monitor the perlmonks RSS feed (Gnus) also renders the user id as p੦j. The RSS feed is fine, it is the reader which gets the decoding wrong.

      I was going to post a link to tye&nbsp;, but fell down the rabbit hole of the links and got distracted :P

Re: New user's name contains utf...
by stevieb (Abbot) on Jan 13, 2019 at 21:14 UTC

    I am unsure of any vectors regarding this situation to be honest.

    Corion, are you around to investigate? How about any other gods?

    Whether it's a breach attempt or not, very, very nice eye to catch this, bliako!

    Update: I've /msg gods to have a quick look to see if there may be any nefarious happenings surrounding what you've (ie: bliako) spotted.

      Everything's fine.

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: monkdiscuss [id://1228490]
Approved by stevieb
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others examining the Monastery: (3)
As of 2019-06-20 03:42 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?
    Is there a future for codeless software?



    Results (89 votes). Check out past polls.

    Notices?