Hacker News new | ask | show | jobs
by WalterBright 90 days ago
Look I'm writing sdrawkcab (amazingly, I did it without using Unicode!). Layout is the job of your text formatting program. It's easy to fix a text editor to support right-to-left text entry.

The switch in text direction has resulted in malicious code injection attacks, as the reversed text becomes invisible. I had to change my compiler to reject those Unicode characters for that reason. It can be used in other cases to have hidden, malicious text.

Have you checked your SQL code for invisible backwards text that injects malware?

2 comments

I don't know what "sdrawkcab" means. I'm not a native english speaker, and nothing indicates that it's not a real word or that it is spelled backwards
> Look I'm writing sdrawkcab

How would that work with Text-To-Speech output?

Good question! Two possibilities:

1. Tell the TTS program that the text is RTOL.

2. If the TTS program can speak Arabic, it can detect RTOL Arabic text.

The only purpose for RTOL English I can think of is to insert hidden text for malicious purposes.

how do you search for strings in the text ? how do you search for half the word ? as you do in autocomplete or in that search box in your browser