Facebook Messenger Inserting Web Links Into Regular Text?
Key topics
A friend messaged me:
“How we gonna celebrate Christmas this year with no tree”
And messenger somehow parsed the URL “christ.as” out of this, despite there being no URL in the text, making the whole message clickable.
Sender was Android, receiver (me) was iOS.
Can’t seem to replicate this when sending from iOS.
http://christ.as appears to be an empty holding domain, but I wonder if they’re seeing a spike in traffic from anyone mentioning Christmas.
Also wonder if this happens with any other words or phrases, and if there’s any potential “attack” vector by someone registering these domains.
Facebook Messenger incorrectly parsed a URL from a regular text message, potentially revealing a security vulnerability.
Snapshot generated from the HN discussion
Discussion Activity
No activity data yet
We're still syncing comments from Hacker News.
Generating AI Summary...
Analyzing up to 500 comments to identify key contributors and discussion patterns
Want the full context?
Jump to the original sources
Read the primary article or dive into the live Hacker News thread when you're ready.
Discussion hasn't started yet.