Add '127.0.0.1 xn–9q8h' to /etc/hosts gives you "localghost"
1–10 of 118 posts
Re: Add '127.0.0.1 xn–9q8h' to /etc/hosts gives you "localghost"
#2epic
Re: Add '127.0.0.1 xn–9q8h' to /etc/hosts gives you "localghost"
#3epic
"Love is kinda crazy with a spooky little URL like you," said Atlanta Rhythm Section, probably.
Re: Add '127.0.0.1 xn–9q8h' to /etc/hosts gives you "localghost"
#4I hate to be a spoilsport, but this is a good reminder that https://en.wikipedia.org/wiki/IDN_homograph_attack is still possible in some domains and with some browsers and CLI tools, although some of the easier tricks to detect have been mitigated.
Re: Add '127.0.0.1 xn–9q8h' to /etc/hosts gives you "localghost"
#5This is using Punycode encoding, see https://en.m.wikipedia.org/wiki/Emoji_domain.
Re: Add '127.0.0.1 xn–9q8h' to /etc/hosts gives you "localghost"
#6And how do i type that in the address bar?
Re: Add '127.0.0.1 xn–9q8h' to /etc/hosts gives you "localghost"
#7It took me a while to get the joke because I didn't recognize
that white ghost on a white background. I take this as another
example why these non-ascii urls are a bad idea for security.
Re: Add '127.0.0.1 xn–9q8h' to /etc/hosts gives you "localghost"
#8And how do i type that in the address bar?
If you use Windows, [Logo]+[.]
Re: Add '127.0.0.1 xn–9q8h' to /etc/hosts gives you "localghost"
#9This is using Punycode encoding, see https://en.m.wikipedia.org/wiki/Emoji_domain .
Why is this even a thing?
Re: Add '127.0.0.1 xn–9q8h' to /etc/hosts gives you "localghost"
#10I hate to be a spoilsport, but this is a good reminder that https://en.wikipedia.org/wiki/IDN_homograph_attack is still possible in some domains and with some browsers and CLI tools, although some of the easier tricks to detect have been mitigated.
if you run pihole or a local dnsmasq/unbound it should be possible to mitigate it by sinkholing any unicode domains, e.g. with dnsmasq (requires a patch https://github.com/spacedingo/dnsmasq-regexp_2.76) you can do this:
address=/:xn--*:/0.0.0.0