News for hackers. Stuff that matters.
Re:Attackers Used Look-Alike Domains to Steal $1M from a Chi... by yorwba on Saturday December 07, 2019 @03:22PM (#21732349)
I'm not aware of any Chinese websites that don't just use Pinyin for their domain name. Some random person is squatting on http://xn--wxtr44c.xn--fiqs8s/ (百度.中国), but Baidu doesn't seem to care. They use http://www.baidu.com/ as their primary address.
Re:Attackers Used Look-Alike Domains to Steal $1M from a Chi... by thaumasiotes on Saturday December 07, 2019 @07:05PM (#21733521)
> I'm not aware of any Chinese websites that don't just use Pinyin for their domain name.

There are tons. One prominent email provider is a three-digit number. There's a job board at 51job.com.

(What's 51job? Read in Mandarin, that would be "wǔ yāo job" [five one "job" (the English word)]. This is felt to sound similar to "wǒ yào job" 我要job [I want a job].)

Re:Attackers Used Look-Alike Domains to Steal $1M from a Chi... by yorwba on Sunday December 08, 2019 @04:50AM (#21735128)
I should've written "... that don't just use ASCII characters instead of Hanzi." Of course domains using numbers or English words aren't Pinyin, but the point is that they don't require Punycode to represent.
Re:Attackers Used Look-Alike Domains to Steal $1M from a Chi... by tluyben2 on Sunday December 08, 2019 @02:22AM (#21734740)
Why is 1 = yāo? It is yi isn’t it?
Re:Attackers Used Look-Alike Domains to Steal $1M from a Chi... by thaumasiotes on Sunday December 08, 2019 @02:34AM (#21734767)
一 yi (tone varies based on phonological context) is the ordinary word for 1.

幺 yāo is a common word for 1 when vocalizing a stream of digits. (Such as a phone number / credit card number / account number / etc.) I am told that this originated as a way to easily distinguish 1 from 7 (七 qī) when communicating over a low-quality connection. In the presence of static, yi and qi could sound similar.

CC-CEDICT has a good gloss ( https://www.mdbg.net/chinese/dictionary?page=worddict&wdrst=... ):

> one (unambiguous spoken form when spelling out numbers, esp. on telephone or in military)

Re:Attackers Used Look-Alike Domains to Steal $1M from a Chi... by tluyben2 on Sunday December 08, 2019 @02:38AM (#21734779)
Thanks!