News for hackers. Stuff that matters.

A comment on Show HN: How good are you at spotting lookalike domains?. Parent comment

Re:Show HN: How good are you at spotting lookalike domains? by maxfan8 on Saturday January 18, 2020 @10:43PM (#22089296)
Most modern browsers are designed to prevent IDN homoglyph attacks by using Punycode: https://en.wikipedia.org/wiki/Punycode

This shouldn't be much of a concern these days.

[ Parent | on HN ]
Re:Show HN: How good are you at spotting lookalike domains? by zzo38computer on Saturday January 18, 2020 @11:58PM (#22089564)
In the domain name, yes it uses Punycode, and I have configured it to display the ASCII domain name rather than the Unicode characters; this is an option in the browser. However, there is also the file name, which there seems no option to configure, so I used userChrome.js to change it so that it always displays ASCII for the entire URL and not only the domain name.
[ Parent | on HN ]