Twitter privacy tip: when you copy a tweet to share it outside of Twitter, a unique tracking ID may be appended to the URL. As such, Twitter can associate your account with those you share tweets with. You can stop this by deleting the "?" and everything after it from the URL.

— Jameson Lopp (@lopp) August 21, 2022

To this, most of the followers replied and the tweet gained around 4k likes and around 946 retweets.

https://twitter.com/GhostGunsMatt3r/status/1561310956373901313?t=EiM7VLspcov9Ynoi3TcrNw&s=19

On Twitter, we simply, whenever unique content we like, we share it with others by simply clicking on the share option and sending it to others. However, we don’t realize the mechanisms behind it. That’s what Lopp explained in his tweet. He stated that whenever we share the tweet outside Twitter, an ID is also been sent along with the URL which can show your personal account link too. So for maintaining privacy, one should always delete the ‘? ‘ and everything after that in the URL.

Jameson Lopp is a cypherpunk, which means the one who advocates use of strong cryptography and privacy-enhancing technologies for social and political betterment. He is also the co-founder and CTO of bitcoin security provider Casa.

The post Jameson Lopp revealed a secret of Twitter; know what it is! appeared first on The Tech Outlook.

Inappropriate URL processing is the problem, which they refer to as ParseThru. Up until version 1.17 of Go, semicolons were allowed as an acceptable delimiter in the query section of a URL. This variation returns an error if the URL query contains a semicolon. Go-based cloud-native applications were analyzed by Oxeye researchers, who found an edge case that could have important implications.

The open source programming language Go, also referred to as Golang, was developed for the extensive creation of reliable and efficient software. Go, a Google-supported programming language is used by some of the top companies in the world to create cloud-native apps, including those for Kubernetes.

Researchers from Oxeye discovered that if a user-facing application is running on Go 1.17 or later and the matching backend service is running on a previous version of Go, an attacker can sneak requests with query parameters that would typically be disallowed.

The developers of the applications that were impacted by Oxeye’s findings have released upgrades.

It is advisable for application developers to consider using other query string parsing algorithms or to ensure that queries with semicolons are rejected in order to prevent abuse.

The post The implementation of URLs in Go-based applications exposes vulnerability appeared first on The Tech Outlook.

https://twitter.com/Anonymous_Link/status/1513570461275275266?s=20&t=L1UxaF5XIEWqsKb1ewAN9w

MyAirlines is a platform for making reservations and purchasing airline tickets, as well as receiving updates on the status of reservations.

When a page is moved, the status code 301 is displayed.

They should be used whenever a URL has been permanently replaced with another URL. Users and bots will be permanently redirected to the new URL, which will take the place of the old URL in search results. The old URL will eventually vanish.

The passenger information portal www.MyAirlines.ru was established. The portal is concerned with informing passengers on all flights on the chosen route and date.

The post Anonymous redirects the MyAirlines.ru URL to Google appeared first on The Tech Outlook.