News for hackers. Stuff that matters.

A comment on Phishing attack uses Unicode characters in domains to clone known safe sites.

Re:Phishing attack uses Unicode characters in domains to clo... by nigel182 on Saturday April 15, 2017 @01:05PM (#14121616)
Interestingly, Safari doesn't translate https://www.xn--e1awd7f.com but it _does_ translate http://xn--8q8h17eba.ga/ to emoji in the address bar.

Chrome behaves oppositely, showing unicode for https://www.xn--e1awd7f.com/ but not showing emoji for http://xn--8q8h17eba.ga/

[ Parent | on HN ]
Re:Phishing attack uses Unicode characters in domains to clo... by pimlottc on Saturday April 15, 2017 @01:18PM (#14121678)
For me, Safari 10.1 does not show emoji in the address bar for that URL; both the ones listed show up as raw punycode.
[ Parent | on HN ]