Our Copyfish extension was stolen and adware-infested

Re:Our Copyfish extension was stolen and adware-infested by sillysaurus3 on Sunday July 30, 2017 @08:18PM (#14888659)

This actually isn't true. A website like https://www.xn--80ak6aa92e.com/ won't show up as apple.com. Browsers don't allow Unicode rendering in the URL bar.

Maybe IE is affected though. I haven't tested every browser. But it's a known security concern.

[ Parent | on HN ]

Re:Our Copyfish extension was stolen and adware-infested by nl on Monday July 31, 2017 @12:05AM (#14889388)

It shows up as www.apple.com on Firefox 54.0.1 (latest, up-to-date) on OSX.

[ Parent | on HN ]

Re:Our Copyfish extension was stolen and adware-infested by numerum-bestiae on Monday July 31, 2017 @07:50AM (#14891065)

Just tried - same (54.0.1) FF version on Android DOES show apple.com (Chrome and Yandex do not).

[ Parent | on HN ]

Re:Our Copyfish extension was stolen and adware-infested by CrendKing on Monday July 31, 2017 @04:41AM (#14890374)

about:config, set network.standard-url.punycode-host to true

[ Parent | on HN ]

Re:Our Copyfish extension was stolen and adware-infested by userbinator on Monday July 31, 2017 @02:49AM (#14889955)

Disable IDN and you will be safe from those. If you're not going to use non-ASCII domain names, you won't miss much.

[ Parent | on HN ]

Re:Our Copyfish extension was stolen and adware-infested by fnj on Sunday July 30, 2017 @09:57PM (#14889010)

Sorry to tell you, does show up as apple.com in my browser. Chrome 52.0.2743.82-1 on Arch x86_64.

[ Parent | on HN ]

Re:Our Copyfish extension was stolen and adware-infested by mh- on Sunday July 30, 2017 @11:15PM (#14889242)

That version of Chrome is over a year old.

[ Parent | on HN ]

Re:Our Copyfish extension was stolen and adware-infested by arthurfm on Tuesday August 01, 2017 @01:28AM (#14898112)

The IDN vulnerability was fixed by Google in Chrome 58.

https://arstechnica.co.uk/information-technology/2017/04/chr... https://bugs.chromium.org/p/chromium/issues/detail?id=683314

Why have you got such an old version of Chrome?

[ Parent | on HN ]

Re:Our Copyfish extension was stolen and adware-infested by fnj on Wednesday August 02, 2017 @01:12PM (#14912490)

Thank you. That gives me a strong reason to update.

To answer your question, (1) it's pretty arduous to install Chrome from the AUR, and (2) I am wary of Google removing useful functionality from Chrome.

[ Parent | on HN ]