Fish Posted January 9, 2008 Share Posted January 9, 2008 Yesterday I was trying to get onto Kol's Deviantart page http://-kol.deviantart.com/ but for some reason I couldn't (and still can't) get to it. FF just says "problem loading page... server not found" etc. Strange thing is, when I boot into Windows I can get to his page just fine in both Firefox and IE. As a wild guess, I'm wondering about the minus sign in the URL. Could that be throwing things awry? Link to comment Share on other sites More sharing options...
Michael Lacey Posted January 9, 2008 Share Posted January 9, 2008 Just tried it (running Ubuntu here), doesn't work with the - sign, but take it away and the URL works fine. Edit: I realize now that the one without the - sign is a different person. Sorry, Link to comment Share on other sites More sharing options...
night_stalker_z Posted January 9, 2008 Share Posted January 9, 2008 The - sign in the url does mean its a completely different url. That could probably be why. Link to comment Share on other sites More sharing options...
Fish Posted January 9, 2008 Author Share Posted January 9, 2008 Actually a bug report has already been filed about this https://bugs.launchpad.net/ubuntu/+source/glibc/+bug/144431 but whether anything ever gets done about it.... who knows. I'm sure there aren't many websites that are affected by this. Link to comment Share on other sites More sharing options...
Fish Posted January 9, 2008 Author Share Posted January 9, 2008 OK, I've found a quick and dirty work-around for this. Just add this to /etc/hosts 198.172.81.21 -kol.deviantart.com Obviously, you'd have to do the same for any other sites you might come across with this problem. Link to comment Share on other sites More sharing options...
markwolfe Veteran Posted January 9, 2008 Veteran Share Posted January 9, 2008 Alternative solution might be to use the %-code for the "-", %2D Does http://%2Dkol.deviantart.com work for you? Link to comment Share on other sites More sharing options...
Fish Posted January 9, 2008 Author Share Posted January 9, 2008 Alternative solution might be to use the %-code for the "-", %2DDoes http://%2Dkol.deviantart.com work for you? No, same error, but I see what you were thinking. Link to comment Share on other sites More sharing options...
markwolfe Veteran Posted January 9, 2008 Veteran Share Posted January 9, 2008 Well, it sounds like DeviantArt is allowing a hostname that is not compliant to RFC3696. I saw a post in a different bug tracking system that claimed that urls that start with - could be confused with a command parameter and possibly be exploitable for malicious purposes. I wouldn't hold my breath for a "fix" that both goes against a long-published standard and also provides opportunity for exploit. :ermm: Link to comment Share on other sites More sharing options...
Fish Posted January 9, 2008 Author Share Posted January 9, 2008 Yeah, I doubt too any kind of fix will ever materialize for this, especially as it could be exploited. Interesting though that Windows users could be vulnerable to this... hmmm.... Link to comment Share on other sites More sharing options...
KoL Veteran Posted January 16, 2008 Veteran Share Posted January 16, 2008 Well, it sounds like DeviantArt is allowing a hostname that is not compliant to RFC3696. I saw a post in a different bug tracking system that claimed that urls that start with - could be confused with a command parameter and possibly be exploitable for malicious purposes.I wouldn't hold my breath for a "fix" that both goes against a long-published standard and also provides opportunity for exploit. :ermm: hmm I don't know why deviantART allow users to register with a "-". I have received a lots of email about people that cant get to my deviantart site but I didn't know why. This problem is with Linux right? Because I can login fine with my PC and Mac. Link to comment Share on other sites More sharing options...
markwolfe Veteran Posted January 16, 2008 Veteran Share Posted January 16, 2008 Yup. Seems to be on the Linux implementation only. Link to comment Share on other sites More sharing options...
Recommended Posts