Live data from Hacker News

Attackers Used Look-Alike Domains to Steal $1M from a Chinese VC

darkreading.com

31–37 of 37 posts

Re: Attackers Used Look-Alike Domains to Steal $1M from a Chinese VC

#31
post #3

Earlier quoted context omitted.

Isn’t it time to see more widespread use of encryption in emails? What I’m pertaining to is signing emails to make sure they are coming from correct source.

Encryption doesn’t help Unicode homoglyph attacks. I can send you encrypted messages all day long from google.com, even though they’re not coming from who you think they are.

[deleted]

Re: Attackers Used Look-Alike Domains to Steal $1M from a Chinese VC

#33

Earlier quoted context omitted.

Encryption doesn’t help Unicode homoglyph attacks. I can send you encrypted messages all day long from google.com, even though they’re not coming from who you think they are.

When I use the actual second party's public key, the decryption won't work though, so you'd be found out immediately, surely?

Exactly so.

Re: Attackers Used Look-Alike Domains to Steal $1M from a Chinese VC

#34
post #23

Earlier quoted context omitted.

I'm not aware of any Chinese websites that don't just use Pinyin for their domain name. Some random person is squatting on http://xn--wxtr44c.xn--fiqs8s/ (百度.中国), but Baidu doesn't seem to care. They use http://www.baidu.com/ as their primary address.

> I'm not aware of any Chinese websites that don't just use Pinyin for their domain name. There are tons. One prominent email provider is a three-digit number. There's a job board at 51job.com. (What's 51job? Read in Mandarin, that would be "wǔ yāo job" [five one "job" (the English word)]. This is felt to sound similar to "wǒ yào job" 我要job [I want a job].)

Why is 1 = yāo? It is yi isn’t it?

Re: Attackers Used Look-Alike Domains to Steal $1M from a Chinese VC

#35

Earlier quoted context omitted.

> I'm not aware of any Chinese websites that don't just use Pinyin for their domain name. There are tons. One prominent email provider is a three-digit number. There's a job board at 51job.com. (What's 51job? Read in Mandarin, that would be "wǔ yāo job" [five one "job" (the English word)]. This is felt to sound similar to "wǒ yào job" 我要job [I want a job].)

Why is 1 = yāo? It is yi isn’t it?

一 yi (tone varies based on phonological context) is the ordinary word for 1.

幺 yāo is a common word for 1 when vocalizing a stream of digits. (Such as a phone number / credit card number / account number / etc.) I am told that this originated as a way to easily distinguish 1 from 7 (七 qī) when communicating over a low-quality connection. In the presence of static, yi and qi could sound similar.

CC-CEDICT has a good gloss ( https://www.mdbg.net/chinese/dictionary?page=worddict&wdrst=... ):

> one (unambiguous spoken form when spelling out numbers, esp. on telephone or in military)

Re: Attackers Used Look-Alike Domains to Steal $1M from a Chinese VC

#36

Earlier quoted context omitted.

Why is 1 = yāo? It is yi isn’t it?

一 yi (tone varies based on phonological context) is the ordinary word for 1. 幺 yāo is a common word for 1 when vocalizing a stream of digits. (Such as a phone number / credit card number / account number / etc.) I am told that this originated as a way to easily distinguish 1 from 7 (七 qī) when communicating over a low-quality connection. In the presence of static, yi and qi could sound similar. CC-CEDICT has a good g…

Thanks!

Re: Attackers Used Look-Alike Domains to Steal $1M from a Chinese VC

#37
post #23

Earlier quoted context omitted.

I'm not aware of any Chinese websites that don't just use Pinyin for their domain name. Some random person is squatting on http://xn--wxtr44c.xn--fiqs8s/ (百度.中国), but Baidu doesn't seem to care. They use http://www.baidu.com/ as their primary address.

> I'm not aware of any Chinese websites that don't just use Pinyin for their domain name. There are tons. One prominent email provider is a three-digit number. There's a job board at 51job.com. (What's 51job? Read in Mandarin, that would be "wǔ yāo job" [five one "job" (the English word)]. This is felt to sound similar to "wǒ yào job" 我要job [I want a job].)

I should've written "... that don't just use ASCII characters instead of Hanzi." Of course domains using numbers or English words aren't Pinyin, but the point is that they don't require Punycode to represent.
Post reply on HN