The Homograph Strikes Back - Another IDN Attack With Strikethroughs - Android
By @edent
· android homograph idn NaBloPoMo security · 1,150 words · read ~360 times.
Responsible Disclosure This flaw was reported to both Google and Opera on 23rd October 2014. Background International Domain Names are great! They open the web up to the whole world and allow me to own a domain like 莎士比亚.org. But they are a constant battleground in the fight for security. Homograph attacks are when someone uses two letters or symbols which look the same, to fool a user into visiting the wrong web address. For example TW1TTER.com has the number 1 rather than the letter i. …
Continue reading →