News for hackers. Stuff that matters.
Re:Dear devs: Plus signs are valid by is_true on Tuesday November 23, 2021 @02:39PM (#29322301)
We remove the plus sign and everything after it. Spammers love the + alias.
Re:Dear devs: Plus signs are valid by News-Dog on Wednesday November 24, 2021 @07:57AM (#29329530)
Homoglyph: https://en.wikipedia.org/wiki/Homoglyph

UniCode 'Confusables' Visual-Spoofing: https://unicode.org/reports/tr36/#visual_spoofing

The Invisible JavaScript Backdoor: https://certitude.consulting/blog/en/invisible-backdoor/

<quote> There are many other characters that look similar to the ones used in code which may be used for such proposes, (e.g. “/”, “−”, “+”, “⩵”, “”, “⫽”, “꓿”, “∗”). Unicode calls these characters “confusables”. </quote>