Sign up to save your podcasts
Or
Share “Google Logo Ligature Bug” by jefftk
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
“Google Logo Ligature Bug” by jefftk
Jeffrey Yasskin recently
pointed
out an
interesting
security bug:
The idea is, if you had registered googlelogoligature.net
then Chrome on Android (and possibly other Google products) would have
displayed it as Google.net, potentially tricking users
into thinking they were really interacting with Google.
To see how this worked, you can try searching Google for ["googlelogoligature"],
and you'll see it shows up as "Google":
Poking in devtools, this is dependent on the specific font they're
using, "Google Sans". If I turn that off my "googlelogoligature"
shows just as I typed it:
Fonts can include "ligatures", which let font designers special-case
specific combinations of letters. These were intended to support
things like "f" followed by "i" blending into "fi" nicely, but the
feature has been (ab)used for many other things, including complex [...]
---
First published:
May 18th, 2025
Source:
https://www.lesswrong.com/posts/MGGm8B7StJtbhQs56/google-logo-ligature-bug
---
Narrated by TYPE III AUDIO.
---
Images from the article:
Apple Podcasts and Spotify do not show images in the episode description. Try Pocket Casts, or another podcast app.
View all episodes
By LessWrongJeffrey Yasskin recently
pointed
out an
interesting
security bug:
The idea is, if you had registered googlelogoligature.net
then Chrome on Android (and possibly other Google products) would have
displayed it as Google.net, potentially tricking users
into thinking they were really interacting with Google.
To see how this worked, you can try searching Google for ["googlelogoligature"],
and you'll see it shows up as "Google":
Poking in devtools, this is dependent on the specific font they're
using, "Google Sans". If I turn that off my "googlelogoligature"
shows just as I typed it:
Fonts can include "ligatures", which let font designers special-case
specific combinations of letters. These were intended to support
things like "f" followed by "i" blending into "fi" nicely, but the
feature has been (ab)used for many other things, including complex [...]
---
First published:
May 18th, 2025
Source:
https://www.lesswrong.com/posts/MGGm8B7StJtbhQs56/google-logo-ligature-bug
---
Narrated by TYPE III AUDIO.
---
Images from the article:
Apple Podcasts and Spotify do not show images in the episode description. Try Pocket Casts, or another podcast app.
More shows like LessWrong (30+ Karma)
View all
Making Sense with Sam Harris
26,316 Listeners
Conversations with Tyler
2,462 Listeners
The Peter Attia Drive
8,594 Listeners
Sean Carroll's Mindscape: Science, Society, Philosophy, Culture, Arts, and Ideas
4,174 Listeners
ManifoldOne
97 Listeners
Your Undivided Attention
1,607 Listeners
All-In with Chamath, Jason, Sacks & Friedberg
10,038 Listeners
Machine Learning Street Talk (MLST)
97 Listeners
Dwarkesh Podcast
527 Listeners
Hard Fork
5,527 Listeners
The Ezra Klein Show
16,022 Listeners
Moonshots with Peter Diamandis
566 Listeners
No Priors: Artificial Intelligence | Technology | Startups
134 Listeners
Latent Space: The AI Engineer Podcast
92 Listeners
BG2Pod with Brad Gerstner and Bill Gurley
473 Listeners