~/talk

How a Single ß Can Break Everything

Talkat droidcon London 2025 · 2025-10-30..10-31· [web-platform, security]
links:none on file
slides:none on file

Android stores strings as UTF‑16 so emojis become surrogate pairs and a composed family emoji can make .length return 11, not 1; UTF‑8 dominates network IO but conversion happens constantly. A real bug: uppercasing German sharp S expands to "SS" and breaks a two‑cluster avatar limit; slicing with regex splits grapheme clusters. Fixes: use BreakIterator to count/substring grapheme clusters and avoid uppercasing characters that expand, plus normalize text (NFC) before storing.

AI-written summary · about

  1. 0:00Introduction
  2. 1:09Username profile bug
  3. 2:57Emojis break text
  4. 3:59Unicode history
  5. 4:43Encoding before Unicode
  6. 5:47Code points and representations
  7. 6:51UTF-8 vs UTF-16
  8. 7:56Why UTF-8 dominates
  9. 9:21UTF-8 self-sync
  10. 10:04Android string storage
  11. 11:13Legacy impacts
  12. 12:56Emoji complexity
  13. 13:41Unicode planes
  14. 14:46Non-BMP challenges
  15. 15:08Text normalization
  16. 16:31Graphic clusters
  17. 17:58String length issues
  18. 18:20Skin tone emojis
  19. 18:41Invisible code points
  20. 19:44Counting clusters on Android
  21. 20:48Regex fails Unicode
  22. 21:50Unicode matching
  23. 22:14Fixing profile initials
  24. 23:15Uppercase bug
  25. 24:39Inconsistent uppercase
  26. 25:44Zalgo text
  27. 26:28Real-world Unicode bugs
  28. 27:32Closing remarks
  29. 28:12Q&A
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.