News for hackers. Stuff that matters.

A comment on Bing has been serving up malicious Google Chrome ads for months. Parent comment

Re:Bing has been serving up malicious Google Chrome ads for ... by jobigoud on Sunday October 28, 2018 @08:00AM (#18320260)
> 5. Open another tab and type domain name manually.

I think this point is vulnerable to typosquatting and could actually reduces the overall security of your approach. I would say if the Wikipedia link matches the search engine link you are good to go.

[ Parent | on HN ]
Re:Bing has been serving up malicious Google Chrome ads for ... by weinzierl on Sunday October 28, 2018 @08:15AM (#18320303)
My reasoning is that someone could change the Wikipedia link to a look-alike domain and that this could easily go unnoticed for some time. Even if the domains visually match they don't need to be identical (Unicode Confusables [1]), but the plain ASCII version that I can type on my keyboard is probably the right one.

[1] http://unicode.org/cldr/utility/confusables.jsp

[ Parent | on HN ]