Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Counter: if you support Unicode, you also support homoglyph attacks.

https://www.irongeek.com/homoglyph-attack-generator.php

The real sad is that there's nearly no defense against this, other than scanning codepage of all text you see. At least punycode is available for domain names in URL bar if turned on.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: