Maximilian Golla

Invalid domain names are parsed incorrectly

18

### Versions - Pi-hole: v5.1.2 (Latest: v5.1.2) - AdminLTE: v5.1.1 (Latest: v5.1.1) - FTL: v5.2 (Latest: v5.2) ### Platform - OS and version: Raspbian GNU/Linux 10 (buster) - Platform: Raspberry...

Using Google's PasswordRequirementsSpec API

10

# Google's PasswordRequirementsSpec API: In [June 2018](https://chromium.googlesource.com/chromium/src/+/96943a2f3b5386508fb544bf3b2678e21628eb81), Google started to develop a (in theory privacy protecting) password requirements specification [API](https://chromium.googlesource.com/chromium/src/+/refs/heads/master/components/password_manager/core/browser/generation/password_requirements_spec_fetcher_impl.cc#53) for Chrome's built-in password generator. Essentially, the API returns something...

Dealing with Single sign-on (SSO)-enabled Domains

3

Hi, when I sign into [overleaf.com](https://www.overleaf.com/login), I use the **"Sign in with Google" button**. In such cases, I use my password manager to remind me, "Hey on this website you...

Today, Google announced that Chrome can now share login info between related sites. **Read more here:** https://blog.chromium.org/2021/04/help-users-log-in-across-affiliated.html  So do we just need to crawl the web for `.well-known/assetlinks.json`? Or...

Weak Password Warning Exception List - A new Quirk?

3

Hi all, don't know whether this issue belongs here or it better fits an iOS bug report, so feel free to close. (At least) in Germany there are many banks...

[Ubuntu/Debian] Yubico's PPA (Personal Package Archive) Causes Weak Algorithm (rsa1024) Warning on Ubuntu 24.04 LTS

1

- YubiKey Manager (ykman) version: 5.4.0 - How was it installed?: Yubico's PPA - Operating system and version: Ubuntu 24.04 (Noble Numbat) - YubiKey model and version: Irrelevant - Bug...

Dealing with broadband routers and consumer IoT devices that hijack the DNS

3

Hi, consumer broadband routers [[A](https://www.telekom.de/hilfe/festnetz-internet-tv/anschluss-verfuegbarkeit/anschlussvarianten/allgemein/konfigurationsseite-speedport-wird-nicht-angezeigt), [B](https://avm.de/service/fritzbox/fritzbox-7590/wissensdatenbank/publication/show/1_Benutzeroberflache-der-FRITZ-Box-aufrufen/), [C](https://www.vodafone.it/portal/Aziende/Partita-IVA/Supporto/ADSL-e-Rete-Fissa/Station-e-altri-dispositivi/Vodafone-Station-Revolution/Pannello-di-controllo-station-revolution)] and some IoT devices hijack the DNS for convenient web interface access.  Examples include: ``` http://speedport.ip --> http://192.168.2.1 http://fritz.box --> http://192.168.178.1 http://vodafone.station...

Dealing with multiple/different change password URLs on a single domain

1

Hi, [Deutsche Bahn](https://fahrkarten.bahn.de/cache/start/start.post?lang=en&scope=login#stay) is the main German railway company. Depending on whether you sign in with your **private or business account** the change password URL differs. A) Private account: ...