Why You Can't Visit 💀🎺.com

Рет қаралды 565,179

Күн бұрын

Thanks to Aura for sponsoring this video! Start your 2 week free trial at aura.com/devdetour !
thank mr skeltal 💀🎺.tk
00:00 Intro
00:30 What DNS?
02:37 The Issue with DNS
03:00 The Fix for the Issue with DNS
04:13 IDNA 2008
05:29 Issues with Emoji in Domains
07:33 IDNA 2008 Allows Specific Characters
08:04 Wait, There ARE Emoji .com Domains????
Other links from this video:
- Fake pages I spun up to demonstrate how a homograph attack could work: 🙁🙁.ws and ☹️☹️.ws
- 1:32, Table of internet hosts by year: firstmonday.org/ojs/index.php...
- 1:35, RFC 1034 (DNS): www.ietf.org/rfc/rfc1034.txt
- 3:02, RFC 3492 (Punycode) datatracker.ietf.org/doc/html...
- 5:55, Unicode FAQ unicode.org/faq/basic_q.html
- 6:32, ICANN publication on emoji in domain names: www.icann.org/en/system/files...
- 7:45, the full list of allowed/disallowed code points: www.unicode.org/Public/idna/i...

Пікірлер: 559

@devdetour 4 ай бұрын

Thanks again Aura for sponsoring this video! Check them out at aura.com/devdetour.

@Nik1_ 4 ай бұрын

You should have thanked mr skeltal

@Aura_9275 3 ай бұрын

your welcome

@naidr0x 4 ай бұрын

"tk" is close enough to "thank" so the domain reads as "skull trumpet thank" which is still fine

@NYXsucksatyoutube 3 ай бұрын

RIP .TK

@Albaraa Ай бұрын

🫠

@ItsSeated Ай бұрын

tk is tokelau

@ItsSeated Ай бұрын

a small island in Oceania

@Sky-Link Ай бұрын

@@ItsSeatedtrue

@MuhammadSaied 4 ай бұрын

Being able to use the trumpet with no lips is commendable! Cheers to Mr. Skeltal

@ikosaheadrom 4 ай бұрын

He got more thanks than the vid got views.

@no_hacker2 4 ай бұрын

The ironic twist is that in 2022, both Firefox and Chrome reverted to displaying punycode instead of Unicode, following incidents involving fake Apple websites. Surprisingly, Apple continued to show Unicode despite being a genuine victim of homograph attacks.

@BlackbeltHitoshi 4 ай бұрын

"homograph" finally an attack with a name that actually sounds threatening.

@Raderade1-pt3om 4 ай бұрын

@@BlackbeltHitoshi what a phobe

@BlackbeltHitoshi 4 ай бұрын

@@Raderade1-pt3omwhat do you mean?

@MidnightTheKitten 3 ай бұрын

@@BlackbeltHitoshi Because you included the word "homo" I doubt you were meaning it that way though.

@BlackbeltHitoshi 3 ай бұрын

@@MidnightTheKittenisn't it called a homograph attack? And I'm pretty sure I mean it considering the way I talked about traumatizededgeworth.

@usernamehere_ 4 ай бұрын

"418 im a teapot" i was not expecting to ever actually see that.

@nekrosis4431 4 ай бұрын

Ah, nice catch.

@elbeenny 4 ай бұрын

Status codes continue to impress me even as a pro web dev

@max-wi7xf 4 ай бұрын

reading the code? lmao

@EchoPrograms 4 ай бұрын

I saw the same thing just now and went to the comments to see if anyone else saw it. Never thought I'd ever see the "I'm a tea pot" error in the wild.

@EchoPrograms 4 ай бұрын

I think it's just not configured right, as it does respond with "thank mr skeltal"

@Z3rgatul 4 ай бұрын

Just small note. Originally all browsers were showing Unicode characters in the address bar. But when malicious actors started registering domains with homographs, Chrome/Firefox switched back to showing raw punycode. Only Safari is still showing Unicode for unknown reasons.

@grmpf 4 ай бұрын

I cannot believe I had to use google to understand this instead of just realising that "holograph" is supposed to say "homograph".

@mega_gamer93 4 ай бұрын

firefox does not show the punycode by default. If you want it to render the punycode you have to set the option network.IDN_show_punycode in about:config manually

@XDarkGreyX 4 ай бұрын

Cuz apple users are apparently the most basic people? Idk

@qunas101 4 ай бұрын

Cause apple is always form over function. Nicer looks is more important than safety apparently

@qunas101 4 ай бұрын

@@mega_gamer93 mine shows punicode and I've never messed with configs

@devdetour 4 ай бұрын

thank mr skeltal

@kieraisverybored 4 ай бұрын

bout to make it hit a billion thanks in a second

@kieraisverybored 4 ай бұрын

418 response to the post request ahaha nice

@AlfiesFuntime 4 ай бұрын

@@kieraisverybored I'm a teapot

@_nahwhat 4 ай бұрын

@@kieraisverybored time to spam the website with post requests 😈

@_nahwhat 4 ай бұрын

Update: I stopped the script but the counter is still going upwards of 2.5 million thanks

@tomdekler9280 3 ай бұрын

"A branded email adress like *You@🌚👉👈* shows you take your business seriously." is the best part of this whole video.

@eineatombombe 4 ай бұрын

you should add a chat so people can thank mr skeltal in their own words

@widmo206 4 ай бұрын

That would be nice but it'd need to be moderated

@tankfire20 4 ай бұрын

not practical cuz moderation would be a nightmare.

@cartanfan-youtube 4 ай бұрын

@@tankfire20you just hate Mr skeletal smh

@findof7454 4 ай бұрын

There are node js libraries that auto censor so its not that bad@@tankfire20

@ikosaheadrom 4 ай бұрын

There are already 4mil thanks out there

@feynthefallen 4 ай бұрын

Right off the top of my head, I can say: While you _can_ definitely use any unicode character in a domain name these days, doing so almost always breaks accessibility for somebody - and I don't mean for disabled people, but simply for people in parts of the world who don't have that specific character on their local keyboard layout. For me, typing an Ü or an ß is easy, but for an US citizen, it might be a great big hassle to do so. The one best, most compelling reason to restrict oneself to 7-bit-ascii characters in one's domain names is to maximize the potential visitor base.

@Piperonis 4 ай бұрын

Üß we got those on samsung in the US ik it was just an example I just wanted to share

@YagoKatzen 4 ай бұрын

@@Piperonis what about physical keyboards?

@YagoKatzen 4 ай бұрын

@@Piperonis what about physical keyboards?

@SnoFitzroy 4 ай бұрын

protip: there's a difference between "a" and "an" and they're not interchangeable. "a" goes before stressed syllables and consonants, "an" goes before unstressed syllables and vowels. So for example: "If you throw up at school, *a* nurse might give you *an* ice pack"

@subg9165 4 ай бұрын

@@SnoFitzroy sounds kinda like an skill issue to me

@ayush-rana 4 ай бұрын

Dear Mr. Skeletal I am writing this letter to express my heartfelt gratitude for the incredible impact you have had on my life. Your presence, along with your newfound trumpet, has brought a melody of joy and transformation into my world, and I am forever changed because of you. When I first met you, Mr. Skeletal, I was captivated by your skeletal form and the air of mystery that surrounded you. But it was when you picked up that trumpet and began to play that I truly saw the magic within you. Your music has been a source of inspiration and comfort to me. It has lifted my spirits on the darkest of days and filled my heart with hope and joy. Your trumpet has a way of reaching deep into my soul, touching me in ways that words cannot express. But more than your music, Mr. Skeletal, it is your spirit that has touched me the most. Despite the challenges you face, you approach life with a sense of humor and lightness that is truly infectious. You have shown me that no matter what obstacles we may encounter, we can always find a way to make beautiful music out of them. You have also taught me the importance of embracing our talents and passions. Your love for music is evident in every note you play, and it has inspired me to pursue my own passions with the same fervor and dedication. So, thank you, Mr. Skeletal, for being such an amazing and inspiring presence in my life. Your music, along with your trumpet, has changed me in ways I never thought possible, and for that, I am eternally grateful. With heartfelt thanks and a song in my heart❤️

@RichardHennigan 4 ай бұрын

Thank you Mr. ChatGPT.

@ayush-rana 4 ай бұрын

@@RichardHennigan ah shoot, you caught me

@ZipplyZane 4 ай бұрын

It might be good if you clicked the link and watched the video. Then you could -have ChatGPT- write something to honor the creator.

@kdisk8020 4 ай бұрын

This is the amount of info I learn in one month in school compressed into 6min and explained better

@joelpww 4 ай бұрын

Cool 👍🏼

@feetfungus19 4 ай бұрын

Maybe you're not paying enough attention

@ssgoko88 4 ай бұрын

Crazy what happens when you dont watch tiktok in class bozo

@kdisk8020 4 ай бұрын

@@ssgoko88 jokes on u I play clash of clans

@kdisk8020 4 ай бұрын

(That was a joke I pay attention)

@rex_project 4 ай бұрын

Super cool video, can't wait to share this newfound knowledge with some unlucky individual at a house party.

@jammiejammed 4 ай бұрын

honestly same

@amphibia95 4 ай бұрын

you worded it perfectly 😂💀🎺

@MCLooyverse 4 ай бұрын

I just thanked mr skeltal and JESUS THAT'S LOUD

@gigitrix 4 ай бұрын

No half-measures. Mr Skeltal goes full doot

@pvsfair 4 ай бұрын

Thanks for leading me to a 40min documentary (link on the website) that made me cry, that was awesome haha

@gigitrix 4 ай бұрын

If you haven't seen it the creator has a sequel for the source of the 3d models used to construct the gif

@mlatpren 4 ай бұрын

Just wanted to say, I liked this video so much, I actually signed-in to give it another watch and a like. It's rare for me to like tech-based videos outside the small group of KZfaqrs I watch, and even rarer for a video on networking/internet to teach me so many new things! I loved just about every part, even the sponsor bit was well done! And I got an unreasonable amount of joy to hear somebody else also pronounces Ko-Fi that way! I _am_ questioning your choice in terminal font though... but I can't blame you too much, those 7s look sweet.

@ashutoshmahapatra537 4 ай бұрын

you made me watch entire video of skull trimpet's history that I had no idea about!

@_..-.._..-.._ 2 ай бұрын

Guy broke into your car defies stereotypes.

@maurusII 4 ай бұрын

Also usually you are not allowed to have letters from different scripts, ie alphabets, in a domain name, in order to avoid things like the little o vs little omicron example shown in the video

@ragingenby 4 ай бұрын

i was under the impression that .tk domains were no longer registerable, where did you register this at?

@Ambwose 4 ай бұрын

Bro this video is so good you deserve more subs 🔥

@Эок 4 ай бұрын

Amazing video. Thank you so much for the information!

@FEAdvertising 2 ай бұрын

I'm a teapot 🫖

@mightyxt Ай бұрын

I can't thank mr skeltal, my antivirus won't let me.

@tangentfox4677 4 ай бұрын

For years I've known about how this works on the backend, but no one ever explained the attack vector that is why there is arbitrary restriction. The restriction still doesn't match the attack vector, but at least I now know there is a valid reason for it.

@matthewstar2880 Ай бұрын

came onto this video to talk about the doot doot 💀🎺 and ended up learning how URLs and domains work

@KlausWulfenbach 4 ай бұрын

I love how in the beginning of the video Mr Skeltal has just 250 thanks and currently he has over 120 million.

@comosaycomosah 4 ай бұрын

this was unique and cool... i ❤ learning lol appreciate the knowledge friend

@Fafuncho 4 ай бұрын

The impostor was allowed as a crewmate, it is 2024 and now I can't take this out of my head please help

@U-235cereal 3 ай бұрын

I thank mr skeltal

@Wolterhon 4 ай бұрын

A great video, thank you for making it.

@DeuxisWasTaken 3 ай бұрын

This is cool, thanks! When I first saw non-ascii domains I just assumed DNS was updated with UTF-8 support but I should've known better, with something like DNS or IP the inertia is too strong to just globally update it.

@imaginative-monkey 4 ай бұрын

I had no idea about this "puny code"... Thanks! 👍

@Impactframess 4 ай бұрын

I understood and I never coded before. A true eli5 teacher ty

@mrvfino 4 ай бұрын

Very interesting, thanks!

@SamiTheAnxiousBean 4 ай бұрын

I suggest "some history of the skull trumpet" link to a playlist featuring the 2 Videos by Jeffiot regarding the skeleton origins instead of just the first one that's all from me Great video btw!!

@IceTypeFennekin 3 ай бұрын

FUN FACT: the HOSTS file still exists in Windows TO THIS DAY and still takes priority over DNS. We IT people occasionally still use it, albeit once in a blue moon.

@satyamgupta756 4 ай бұрын

summary: because it isn't allowed

@splashmanej3 3 ай бұрын

thank

@wheresmyspegit Ай бұрын

very cool and informative, you earned a sub :)

@FilthyAnimal893 4 ай бұрын

congrats on 10 million thanks!

@8Bit_Studio 3 ай бұрын

I thanked the skeleton, and he thanked me.

@Soguwe 3 ай бұрын

This is a very strange sequel to the documentary on the origin of the trumpet gif, but I'll take it

@HelloKittyFanMan 4 ай бұрын

Haha, interesting video! It makes me wonder why, in all these years that I've been going online, I had never tried an Emoji in a URL or e-mail address to see what it does until now! But now I know, heheh!

@Aiden_Z_playz 3 ай бұрын

1:42 guy: “when-ever you ask to browser to go to a website” background: *asks google to go to a website quite literally*

@othello7 4 ай бұрын

How did you register a .tk domain? I thought freenom was down currently

@zuriel4783 4 ай бұрын

Thanks Mr. Skeletal

@randomhuman69420 4 ай бұрын

3:37 the eggplant emoji in frequently used 💀

@australianpainter42069 4 ай бұрын

Self caught in 4k

@XxZeldaxXXxLinkxX 4 ай бұрын

Grow up

@ashleybyrd2015 4 ай бұрын

@@XxZeldaxXXxLinkxXWhy are you so boring

@Chomta 4 ай бұрын

@@XxZeldaxXXxLinkxX grow as a person

@fiffy6572 4 ай бұрын

the counter is pure genius

@moebuta5250 4 ай бұрын

thats an interesting finding to me, thanks for the video and subbed

@BananasGoMooDev Ай бұрын

unrelated to the video but i'm so glad you put the history video of doot doot on the website lol

@DavidMcCoul 3 ай бұрын

I’ve always wondered this!

@Povilaz 4 ай бұрын

Very interesting!

@deejayiwan7 4 ай бұрын

Excellent video 💯👏👏👏👏👏

@sad_spongebobb 4 ай бұрын

just hit 10mil thanks congrats

@nomadshiba 4 ай бұрын

Chrome might or should only convert the domain name to punny code visually if it contains any disallowed characters

@JonJaded 4 ай бұрын

5:29 Wow this is crazy because my brother visited a site that was a USPS scam, and the link looked right, but when clicked and opened, it turned into letter scramble. I assume it was an embeded hyperlink in the text, but it was likely what was explained here.

@khmerleftysbassplayer7278 3 ай бұрын

0:06 what is this effect called?

@Chara_J 13 күн бұрын

This reminds me of that one part in "To the bone". Papyrus: Alas, I'll hit him with my Special Attack Sans:*trombone sounds* Papyrus: Leave me alone! Sans: You know I've got a knack for the trom-bone Papyrus: One more pun, and I'll be done Sans: But ain't two skulls better than one?

@Lovuschka 4 ай бұрын

Moral of the story: Be extra careful with websites from Samoa, Tonga, Tokelau.

@LionTheFish 4 ай бұрын

50 million total thanks so far

@scrubpsw2813 3 ай бұрын

thanks mr skeletal

@recon_wtf 3 ай бұрын

thanks mr skeltal

@HelloKittyFanMan 4 ай бұрын

"How do we prevent Homograph Attacks?" I don't know, but we might be able to prevent homograph attacks.

@razvbir 4 ай бұрын

What registrar do you use for emoji domains?

@lonelyPorterCH 4 ай бұрын

Thanks, mr skeletal

@LemonLimeGuyOfficial 4 ай бұрын

thank you mr skeltal

@Leroy-Jenkem 20 күн бұрын

1:20 WASHINGTON STATE MENTIONEDD RAHHH!!!!!

@Furkxn 3 ай бұрын

Where do you buy the .tk domain from?

@akam9919 3 ай бұрын

1:39 that's such a sweet kind old grandma thing to google 😢😩

@t3chnicolor Ай бұрын

You need to do an update to this video addressing handshake (HNS) domains….

@alonzohedgehog 2 ай бұрын

my question is how the heck do you have a .tk domain i thought they shut it down

@roundhouse2616 4 ай бұрын

thank you mr skeltal and thank you cathy jarboe for creating him

@kogelmogel3833 4 ай бұрын

very cool video, cheers

@trevorjamesconsideracion1982 4 ай бұрын

thank mr skeletal :D

@BimblyPlays_ 3 ай бұрын

My web protect (built into my wifi) dosent let me 😭

@_GhostMiner 4 ай бұрын

How did you even get a tk TLD? All websites that claim to be registers for tk domain don't work.

@deadoon 4 ай бұрын

.TK has it's own registrar, and it's free. You can't get it through subsidiaries as a result.

@diamonddynamite1557 4 ай бұрын

@@deadoonyea but the shut down like a few months ago, not sure if they came back tho

@yugoslavia2862 4 ай бұрын

.TK has it's own registrar, and it's free. You can't get it through subsidiaries as a result.@@diamonddynamite1557

@ethanspeedsters2198 3 ай бұрын

the honk burnt my ears

@ImNotAThing 3 ай бұрын

i thanked mr. skeltal

@BETHANYXD 4 ай бұрын

how does the thanks work?

@NiranjanND 4 ай бұрын

Nice info

@vp_bot 4 ай бұрын

when did you register that domain?

@Zoom-ez8ps 4 ай бұрын

yeah bro, i think about it too, he found new .tk hosting?

@BerryTheBnnuy 4 ай бұрын

The idea that a data broker who traffics in information that can be used to steal someone's identity would ever actually remove your data from their systems is patently absurd. They have no motivation to comply with the request and every motivation to not comply.

@LionTheFish 4 ай бұрын

they are legally required to comply

@BerryTheBnnuy 4 ай бұрын

@@LionTheFish They're also legally required to not be selling identities. Do you really expect people whose entire business is breaking the law to not break the law? You remind me of when Trump recently declared he'd solve crime in DC by establishing "crime free zones"... Like I have news for you, crime is already illegal.

@BerryTheBnnuy 4 ай бұрын

@@LionTheFish They're legally required to not be selling people's identities. So what exactly is your point? That criminals will stop doing crimes if you ask nicely?

@LionTheFish 4 ай бұрын

@@BerryTheBnnuy While shady and legally dubious, data brokering is legal in most countries, including but not limited to, the US, UK, EU, and Australia.

@BerryTheBnnuy 4 ай бұрын

@@LionTheFishOh, you're right, criminals in UK, EU, and AU trading in people's identities are law abiding citizens. It's only the criminals in America that don't abide by the law. My mistake.

@karersio7062 3 ай бұрын

i somehow made a bot that makes the total thanks go brrrrrrrrrrrrr to make mr skeletal happy

@Alex_Cevi 4 ай бұрын

They killed my TK domain ...

@Lawdasur_Reflex 3 ай бұрын

hell yeah

@ObbyManRoblox 4 ай бұрын

this will blow up

@turkey_sandwhich 4 ай бұрын

102 million thanks to mr skeletal

@Stoodknight 4 ай бұрын

how did you make the website?

@tanaka9959 3 ай бұрын

am I the only one to have found out that when u click the right number of time on the thanks button there is a red text ? (I reloaded the page just after so I didn't see the text at all, that's why I don't know how many time u have to press the button

@_..-.._..-.._ 2 ай бұрын

P Sherman 42 Wallaby Ln Sydney Australia is the address of my dentist.

@soejrd24978 4 ай бұрын

Thanks mr skeltal, doot doot

@What-is-a-handle-is-it-a-tag 21 күн бұрын

time to get some malaware!

@AlisterCountel 29 күн бұрын

What stops a host from simply registering the punycoded domain name and telling people it uses the associated emojis? Since the browser will translate it anyway, I assume it will still be found when typed in as emojis.