News for hackers. Stuff that matters.

A comment on Show HN: How good are you at spotting lookalike domains?.

Re:Show HN: How good are you at spotting lookalike domains? by zzo38computer on Saturday January 18, 2020 @03:43PM (#22087047)
Fortunately I know the form of a URL (anyone who uses them ought to know, and if you don't know, then you must learn), and I use a fixed pitch font on the status bar and location bar. I also fixed it to display only ASCII characters in the location bar, so that homoglyph attacks are also avoided.
[ Parent | on HN ]
Re:Show HN: How good are you at spotting lookalike domains? by maxfan8 on Saturday January 18, 2020 @10:43PM (#22089296)
Most modern browsers are designed to prevent IDN homoglyph attacks by using Punycode: https://en.wikipedia.org/wiki/Punycode

This shouldn't be much of a concern these days.

[ Parent | on HN ]
Re:Show HN: How good are you at spotting lookalike domains? by zzo38computer on Saturday January 18, 2020 @11:58PM (#22089564)
In the domain name, yes it uses Punycode, and I have configured it to display the ASCII domain name rather than the Unicode characters; this is an option in the browser. However, there is also the file name, which there seems no option to configure, so I used userChrome.js to change it so that it always displays ASCII for the entire URL and not only the domain name.
[ Parent | on HN ]