News for hackers. Stuff that matters.

A comment on Phishing attack uses Unicode characters in domains to clone known safe sites. Parent comment

Re:Phishing attack uses Unicode characters in domains to clo... by beaconstudios on Saturday April 15, 2017 @07:46AM (#14120380)
or maybe just disallow mixed-charset domains. After all there's not much use for a domain that's partially Cyrillic and partially Latin. Not that I'm aware of anyway - and the rule could be more granular if there are legit uses.
[ Parent | on HN ]
Re:Phishing attack uses Unicode characters in domains to clo... by krallja on Saturday April 15, 2017 @10:17AM (#14120788)
see https://news.ycombinator.com/item?id=14120372 - this example uses all-Cyrillic
[ Parent | on HN ]
Re:Phishing attack uses Unicode characters in domains to clo... by beaconstudios on Saturday April 15, 2017 @08:38PM (#14123700)
the point is that is reduces the number of potential variations. There would only be 1 or 2 possible visually-identical phishing domains for any latin domain, as opposed to potentially hundreds or thousands as it stands now.
[ Parent | on HN ]
Re:Phishing attack uses Unicode characters in domains to clo... by 01000001 on Saturday April 15, 2017 @08:54AM (#14120533)
this makes a lot of sense
[ Parent | on HN ]