Earlier quoted context omitted.
Isn’t it time to see more widespread use of encryption in emails? What I’m pertaining to is signing emails to make sure they are coming from correct source.
Encryption doesn’t help Unicode homoglyph attacks. I can send you encrypted messages all day long from google.com, even though they’re not coming from who you think they are.
Attackers Used Look-Alike Domains to Steal $1M from a Chinese VC
31–37 of 37 posts
Re: Attackers Used Look-Alike Domains to Steal $1M from a Chinese VC
#32Re: Attackers Used Look-Alike Domains to Steal $1M from a Chinese VC
#33Earlier quoted context omitted.
Encryption doesn’t help Unicode homoglyph attacks. I can send you encrypted messages all day long from google.com, even though they’re not coming from who you think they are.
When I use the actual second party's public key, the decryption won't work though, so you'd be found out immediately, surely?
Re: Attackers Used Look-Alike Domains to Steal $1M from a Chinese VC
#34Earlier quoted context omitted.
I'm not aware of any Chinese websites that don't just use Pinyin for their domain name. Some random person is squatting on http://xn--wxtr44c.xn--fiqs8s/ (百度.中国), but Baidu doesn't seem to care. They use http://www.baidu.com/ as their primary address.
> I'm not aware of any Chinese websites that don't just use Pinyin for their domain name. There are tons. One prominent email provider is a three-digit number. There's a job board at 51job.com. (What's 51job? Read in Mandarin, that would be "wǔ yāo job" [five one "job" (the English word)]. This is felt to sound similar to "wǒ yào job" 我要job [I want a job].)
Re: Attackers Used Look-Alike Domains to Steal $1M from a Chinese VC
#35Earlier quoted context omitted.
> I'm not aware of any Chinese websites that don't just use Pinyin for their domain name. There are tons. One prominent email provider is a three-digit number. There's a job board at 51job.com. (What's 51job? Read in Mandarin, that would be "wǔ yāo job" [five one "job" (the English word)]. This is felt to sound similar to "wǒ yào job" 我要job [I want a job].)
Why is 1 = yāo? It is yi isn’t it?
幺 yāo is a common word for 1 when vocalizing a stream of digits. (Such as a phone number / credit card number / account number / etc.) I am told that this originated as a way to easily distinguish 1 from 7 (七 qī) when communicating over a low-quality connection. In the presence of static, yi and qi could sound similar.
CC-CEDICT has a good gloss ( https://www.mdbg.net/chinese/dictionary?page=worddict&wdrst=... ):
> one (unambiguous spoken form when spelling out numbers, esp. on telephone or in military)
Re: Attackers Used Look-Alike Domains to Steal $1M from a Chinese VC
#36Earlier quoted context omitted.
Why is 1 = yāo? It is yi isn’t it?
一 yi (tone varies based on phonological context) is the ordinary word for 1. 幺 yāo is a common word for 1 when vocalizing a stream of digits. (Such as a phone number / credit card number / account number / etc.) I am told that this originated as a way to easily distinguish 1 from 7 (七 qī) when communicating over a low-quality connection. In the presence of static, yi and qi could sound similar. CC-CEDICT has a good g…
Re: Attackers Used Look-Alike Domains to Steal $1M from a Chinese VC
#37Earlier quoted context omitted.
I'm not aware of any Chinese websites that don't just use Pinyin for their domain name. Some random person is squatting on http://xn--wxtr44c.xn--fiqs8s/ (百度.中国), but Baidu doesn't seem to care. They use http://www.baidu.com/ as their primary address.
> I'm not aware of any Chinese websites that don't just use Pinyin for their domain name. There are tons. One prominent email provider is a three-digit number. There's a job board at 51job.com. (What's 51job? Read in Mandarin, that would be "wǔ yāo job" [five one "job" (the English word)]. This is felt to sound similar to "wǒ yào job" 我要job [I want a job].)