iTerm on macOS leaks anything you over hover via DNS

A misguided feature in iTerm on macOS will attempt a (plaintext) DNS
lookup of anything you hover over to figure it if it could be a valid
URL. So that password you just generated and want to cut-n-paste for
instance?

Apparently they've reverted back to having that disabled by default in 3.1.2...

https://www.bleepingcomputer.com/news/security/iterm2-leaks-everything-you-hover-in-your-terminal-via-dns-requests/

https://gitlab.com/gnachman/iterm2/wikis/dnslookupissue

iTerm is otherwise a great application, but that was definitely a Bad Idea.

JF
To unsubscribe from the list send a blank e-mail to mailto:studiosysadmins-discuss-request@studiosysadmins.com?subject=unsubscribe