4 ms·
This doesn't seem like a terribly important information leak, but what gets me is that they obfuscated it by converting it to hex. Why do that? On the one hand
by mistercow 10y ago
This doesn't seem like a terribly important information leak, but what gets me is that they obfuscated it by converting it to hex. Why do that?
On the one hand, it feels like they're being sneaky and trying to trick savvier users who might glance at the data to make sure it "looks encrypted". On the other hand, they have to have realized someone would notice eventually. Or maybe that's the point: if they obfuscated it well, someone would break it and they'd have egg on their faces. By just hiding it a little, they have plausible deniability that they weren't trying to obfuscate.
But any way you slice it, it seems weird.
- daveFNbuck 10y agoIt's probably just easier to convert it to hex rather than worry about escaping characters. I've done that before.
- mistercow 10y agoYeah, good point, although URL escaping is particularly easy.
- rocqua 10y agoConversion to hex is probably to deal with characters that would require conversion if a part of the URL.