121–128 of 128 posts
This was how some folks pretended that Google had erased all mentions of "Oracle": http://giorgiosironi.blogspot.com/2010/08/google-never-remov... I used this to prank some people on the in-house SEO team at my last job. I'd ask them if they had done anything that might be considered black-hat. Then I sent him a link to a "site:" query on Google indicating that our site had been removed from the index. e.g. http://ww…
A while ago I compiled a list of unicode characters that looked like letters, to get past curse filters. Not comprehensive, because I just manually skimmed through a unicode table, but here it is if anyone cares: Wide letters: Ａ Ｂ Ｃ Ｄ Ｅ Ｆ Ｇ Ｈ Ｉ Ｊ Ｋ Ｌ Ｍ Ｎ Ｏ Ｐ Ｑ Ｒ Ｓ Ｔ Ｕ Ｖ Ｗ Ｘ Ｙ Ｚ ａ ｂ ｃ ｄ ｅ ｆ ｇ ｈ ｉ ｊ ｋ ｌ ｍ ｎ ｏ ｐ ｑ ｒ ｓ ｔ ｕ ｖ ｗ ｘ ｙ ｚ Better looking letters: ϲ р с Ѕ І А В Е М Н О Р С а е о ѕ і ԛ Anyone know of a better res…
Someone need to write a scanner that compare Unicode fonts visually and list the most alike characters.
I personally find the RLO / LRO issue much more concerning. I just tested Chrome and Firefox and found it works in URLs. You could rewrite pyapla.com to paypal.com and phish people easily.
But I guess from now on I look at the chars to the left of the dot as well..
Seems easy enough to guard against. Highlight the characters which are unexpected for my locale.
I remember years back on Wikipedia, clever vandals would play Unicode tricks. It was interesting, to say the least - you'd register a name that looks identical to a real user, vandalize, and hope the administrator would type the name in... This was ultimately stopped by Antispoof ( https://secure.wikimedia.org/wikipedia/mediawiki/wiki/Extens... ) but the bug reports are still interesting: - https://bugzilla.wikimedia…
Although it's not vandalism, something else that permeated Wikipedia is the use of the Cyrillic ya (Я) in places of R, where the stylized artwork for the article subject reverses the R (and varies it in many other ways, for sure). The difference between the two is that this phenomenon is not wholly in the past. One of the biggest thorns of the situation is when editors bring up an official or semi-offical website rel…
Earlier quoted context omitted.
Although it's not vandalism, something else that permeated Wikipedia is the use of the Cyrillic ya (Я) in places of R, where the stylized artwork for the article subject reverses the R (and varies it in many other ways, for sure). The difference between the two is that this phenomenon is not wholly in the past. One of the biggest thorns of the situation is when editors bring up an official or semi-offical website rel…
Can you point to a few examples?
Thankfully, Cyrillic as a poor approximation of the artwork doesn't always win out http://en.wikipedia.org/wiki/Talk:Superunknown#Track_name_.2...
And hey! It looks like discussion that I wasn't even aware of spawned on the Toys R Us talk page about it.
This was how some folks pretended that Google had erased all mentions of "Oracle": http://giorgiosironi.blogspot.com/2010/08/google-never-remov... I used this to prank some people on the in-house SEO team at my last job. I'd ask them if they had done anything that might be considered black-hat. Then I sent him a link to a "site:" query on Google indicating that our site had been removed from the index. e.g. http://ww…
The wide variety of exploits such as these suggests that we need to integrate character spoofing into the general malware detection system on devices, which evolves over time (in the way that virus checkers evolve, with lots of human input) to deal with known or anticipated problems. I'm thinking of a system that combines aspects of virus checking, malware detection, bayesian spam filtering, and spell checking. A Uni…
Suggestions like this should get you a professional penalty, like a yellow card.
"Saw a specific problem, suggested an Are-you-sure dialog for this specific case, on top of that, one most people can't answer".