Follow

Using an opaque cookie from an header,
you can retrieve a DNS TXT record,
in which you can find a URL,
from which you can retrieve a slightly odd TLS certificate,
inside a custom extension of which,
you can find a complex asn.1 structure
that contains a string,
that uses a data: format url,
to embed
a base64 encoded
gzipped
string,
that is an svg encoded
image.

How on earth does the Internet work at all, given this is the house of cards it's built on?

· · Ivory for iOS · 6 · 23 · 56