Well I couldn't recreate this, I get  
'h t t p : / / w w w . p0 y p a l . c o m ' when I paste. Not sure  
about your comment about doing copy in safari, then copy again in  
Squeak, trying both copy and paste doesn't seem to do it?

Got some more detailed steps?

Nasty exploit btw.

PS Send me the crash log (not to the list)

On Feb 7, 2005, at 1:44 PM, Avi Bryant wrote:
On Feb 7, 2005, at 1:44 PM, Avi Bryant wrote:

> I just found an interesting crashing bug on OS X, using
> Squeak-3.6-3.app.  There are probably lots of ways to replicate it,
> but this is how I happened to find it:
>
> - open a Squeak image (tested on a 3.6 era image)
> - go to http://www.shmoo.com/idn/ in Safari.  This is a demo of an
> exploit possible by using unicode characters in domain names to spoof
> well known sites.
> - click on the "paypal.com" link and copy the text in the URL bar
> - go to Squeak, select any text, and copy
>
> Squeak crashes for me with the message:
> <NSCharacterConversionException> Conversion to encoding 30 failed for
> string "https://www.p_ypal.com/" (I inserted a _ in there to show that
> there's a funny char there in Terminal, but which would show up as an
> "a" in some email clients).
>
> Avi
>
>
--
======================================================================== 
===
John M. McIntosh <johnmci at smalltalkconsulting.com> 1-800-477-2659
Corporate Smalltalk Consulting Ltd.  http://www.smalltalkconsulting.com
======================================================================== 
===