Post #2468317
2025-11-27 11:01 UTC
Replies (37)
-
@hisold@toot.io 2025-11-27 11:14
@benjojo@benjojo.co.uk Now I have to set ßh to a shell alias everywhere. This is brilliant.
-
@mia@shrimptest.0x0.st 2025-11-27 11:38
@benjojo@benjojo.co.uk macOS does different unicode normalization depending on which API you call as well iirc; there’s a lot of potential for things going wrong
-
@ol0ck@social.hackerspace.pl 2025-11-27 11:45
@benjojo@benjojo.co.uk as for funny macos trivia, macos has a malloc zone called `MALLOC_NANO`, which was *always* mapped at 0x600000000000. I can see that it is still mapped into some processes, though I can't reproduce allocations into it with my previous PoCs, but IIRC, this zone used to be malloc()'s default zone for some cases.
-
@krono@toot.berlin 2025-11-27 12:31
@benjojo@benjojo.co.uk Yeah, a few weeks ago my fedi-bubble noticed that too: https://toot.berlin/@krono/115484271882289019
-
@darkphoenix@not.an.evilcyberhacker.net 2025-11-27 12:35
@benjojo@benjojo.co.uk ...ohhh because case insensitive FS
-
@patpro@social.patpro.net 2025-11-27 12:49
@benjojo@benjojo.co.uk OMG, brilliant :D
-
@animaux@oslo.town 2025-11-27 13:01
@benjojo@benjojo.co.uk @jwildeboer@social.wildeboer.net Looks like a feature to me! ;)
-
@sigmasternchen@comfy.social 2025-11-27 13:08
@benjojo@benjojo.co.uk Okay, this is hilarious! ^^
-
@holgersson@maly.io 2025-11-27 13:14
@benjojo@benjojo.co.uk Feature request: Open a Zsh on the remote side, because ß equals sz, so you're typing szh.
-
@stefan@akko.lightnovel-dungeon.de 2025-11-27 13:28
@benjojo@benjojo.co.uk swiss users cannot comprehend this! (marked not safe for switzerland) This is great
-
@niconiconi@mk.absturztau.be 2025-11-27 14:55
@benjojo@benjojo.co.uk It's said that not all macOS apps work properly if filesystem case insensitivity is turned off, otherwise I'd like to when formatting my disk.
-
@Andrev@types.pl 2025-11-27 15:06
@benjojo@benjojo.co.uk as god intended
-
@tisha@htt.social 2025-11-27 15:36
@benjojo@benjojo.co.uk OMG 😹
-
@NafiTheBear@snaggletooth.life 2025-11-27 17:03
@benjojo@benjojo.co.uk sad, because that would be ſʒh :p
-
@luna@lunya.gay 2025-11-27 18:55
@benjojo@benjojo.co.uk macos is whack and i love it
-
@pecet@f3d1.eu 2025-11-27 19:36
@benjojo@benjojo.co.uk @misty@digipres.club I hope I’m getting trolled right now
-
@hyggesalpaka@alpaka.garden 2025-11-27 19:53
@benjojo@benjojo.co.uk :mild_panic:
-
@heals@indiepocalypse.social 2025-11-27 20:04
@benjojo@benjojo.co.uk not as quirky and exploitable as it seems - while "ß" is normalised to the equivalent "ss" macOS will still prefer any script or binary that matches the non-normalised input (/usr/local/bin is first in my path and would take precedence over /usr/bin/):
-
@encthenet@flyovercountry.social 2025-11-27 20:29
@benjojo@benjojo.co.uk This is related to the fun of macos normalizing utf-8 names. Put a non-normalized utf-8 name on an NFS share, and some macos apps won't be able to find/open it. You can drag and drop it, but if you use the open command it won't work.
-
@th@social.v.st 2025-11-29 16:21
@benjojo@benjojo.co.uk I don't have a Mac, so can you try running ſſh to see if archaic English is also normalized?
-
@domi@donotsta.re 2025-11-27 11:04
@benjojo@benjojo.co.uk i joked about this 2 or so years ago (outside the normalization context), i can’t believe this is actually real
-
@Erased_Citizen@cupoftea.social 2025-11-27 11:06
@benjojo@benjojo.co.uk @WiteWulf@cyberplace.social no way. Amazing.
-
@meph@social.treehouse.systems 2025-11-27 11:07
@benjojo@benjojo.co.uk what the hell! I saw someone else posting about this a few days ago and I thought it was a joke!!!
-
@dentaku@fnordon.de 2025-11-27 11:25
@benjojo@benjojo.co.uk If your filesystem is set to case insensitive, ẞH works too.
-
@quietbear@tech.lgbt 2025-11-27 12:08
@benjojo@benjojo.co.uk @cstross@wandering.shop sounds like my kind of pub.
-
@dtemme@hachyderm.io 2025-11-27 12:21
@benjojo@benjojo.co.uk I kind of like it but hate the unavoidable inconsistency with et and at
-
@issotm@social.treehouse.systems 2025-11-27 12:25
@benjojo@benjojo.co.uk Friend of mine saw this, first thing he said is "this has to be exploitable". ... 😭 of course this has to bypass something's path sanitisation
-
@dshan@mastodon.au 2025-11-27 13:48
@benjojo@benjojo.co.uk Oh dear, you found it. Be careful, that version of ssh connects you to the torment nexus host, and connecting to the torment nexus is rarely survivable.
-
@skab@troet.cafe 2025-11-27 15:00
@benjojo@benjojo.co.uk Tried it, wild... Even wilder: > which ßh /usr/bin/ßh
-
@Sobex@social.sciences.re 2025-11-27 15:10
@benjojo@benjojo.co.uk Incredible, and yet it works. touch teßt, file tesst also works :D (You can't create tesst and teßt in the same directory)
-
@ppxl@social.tchncs.de 2025-11-27 15:27
@benjojo@benjojo.co.uk edit: forget what I wrote See toot below Orig: for non Germans: there is no win here... ßh looks shorter than ssh but it takes more complicated keystrokes to issue it (fits the German-ness, tho): ssh = s,s,h ßh = Alt Gr+?, h
-
@zkat@toot.cat 2025-11-27 15:33
@benjojo@benjojo.co.uk this is not just a quirk. This is a vulnerability.
-
@groxx@hachyderm.io 2025-11-27 19:25
@benjojo@benjojo.co.uk filesystem normalization is always a monstrous mistake. normalize/collate for search and display, not storage and equality.
-
@cyberspice@oldbytes.space 2025-11-27 21:17
@benjojo@benjojo.co.uk @saramg@fosstodon.org That’s logical and kind of kewl. I wonder if there’s any commands where replacing th with þ would work!
-
@drunkenmadman@aus.social 2025-11-27 23:57
@benjojo@benjojo.co.uk mind. blown.
-
@halcy@icosahedron.website 2025-11-28 09:48
@benjojo@benjojo.co.uk I mean I can see why that would happen. But I do not like it.
-
@eestileib@tech.lgbt 2025-11-29 17:59
@benjojo@benjojo.co.uk My high school German teacher would have been very displeased because it's Not The Same