61–70 of 136 posts
TR36 bidi spoofs are usually worse than TR39 confusables. Move over with your cursor over it. http://www.unicode.org/reports/tr36/#Bidirectional_Text_Spoo...
That's why browsers or dns tools use libidn, just programming languages not.
Earlier quoted context omitted.
l33t-speak is so far off my radar that I was wondering if there was some hot startup called '4 people 3' or somesuch. I doubt anyone at Apple remotely cares about l33t-speak from a branding perspective.
To be fair, I don't think I know anyone who "cares" about l33t speak. H4xx0r j0k3s is all it is. I never seen anyone go out of their way to defend or use leet speak all day long.
e.g. a site selling them in the UK is promoting "JO66 ERX", which is probably supposed to be read as "Jogger X". Current bid £750, for some reason.
Unicode URLs are the devil. Too many indistinguishable characters. URLs should stay full ASCII imho. And I say that as someone whose language requires non-ASCII symbols. Or, in Bruce Schneier's words: "Unicode is just too complex to ever be secure."
You really need to support this 'sub café {} café()' => Undefined subroutine café in your friendly and social programming language, otherwise you will be accused of discrimination. Of course the two é are not normalized.
Which unicode-friendly language does really check for mixed script confusables? Java only is my guess. Even perl6 falls into this trap.
Earlier quoted context omitted.
Considering it's already registered, I'd say it's possible: https://whois.domaintools.com/xn--gogle-kye.com
Thanks, I was wrong. That's even worse than I thought.
Why Google analytics isn't filtering out this referral spam?
Earlier quoted context omitted.
Most browsers should forcibly transcribe this to Punycode[1]: https://www.𝙿𝙰𝚈𝙿𝙰𝙻.com/ And yet when I paste this into the latest Firefox it redirects to https://www.paypal.com/ No 301 redirects or anything, the browser just treats it like ASCII, which it is clearly not, it actually happens to be Fullwidth: https://en.wikipedia.org/wiki/Fullwidth_form Serious phishing opportunity if you ask me! [1] https://en.wik…
Nope. The browser is behaving sensibly, since you can't register that domain. It's applying the same rules that the registrars do. ICANN require that registries follow RFC3491 and related RFCs for name prep before allowing a name to be registered https://www.icann.org/resources/unthemed-pages/idn-guideline... . What that one does is (among other things) NFKC normalization and case-folding: irb(main):016:0> "\ufeff\uf…
Something like www.ｐａｙpal.com --> www.n--pal-n76secrc.com
This is something that's been bugging me for years. Why are there multiple representations of alphabet characters in Unicode? It seems reasonable to include accent marks, but what's the benefit in having a Cyrillic 'o' alongside a standard 'o' or the 2 or 3 other ASCII-lookalike sets of characters?
I never rely on Unicode for computation. When receiving Unicode I always make sure it's in the ASCII range. It could be argued that there should never have been Unicode domain names but I guess Western people are very lucky that ASCII includes most of their characters...
Earlier quoted context omitted.
Everybody who isn't colorblind anyway.
Use blue, the most common types of color blindness are red-green issues(there's a really tiny percentage that doesn't perceive colors at all but really really tiny. And other than those, nobody has trouble with blue) Source: I'm colorblind(protanope) and red would definitely be an issue. Android studio, for example, is really annoying for me because the particular red they use for errors is very hard to distinguish f…
For me it just redirects to http://money.get.away.get.a.good.job.with.jack.ilovevitaly.com The actual domain is http://xn--oogle-wmc.com/ Which is an Internationalized domain name[1] in punycode transcription [1] https://en.wikipedia.org/wiki/Internationalized_domain_name The G in question here is https://en.wiktionary.org/wiki/%C9%A2 OR http://charcod.es/#%C9%A2/610
http://money.get.away.get.a.good.job.with.more.pay.and.you.are.okay.money.it.is.a.gas.grab.that.cash.with.both.hands.and.make.a.stash.new.car.caviar.four.star.daydream.think.i.ll.buy.me.a.football.team.money.get.back.i.am.alright.jack.ilovevitaly.com/#.keep.off.my.stack.money.it.is.a.hit.do.not.give.me.that.do.goody.good.bullshit.i.am.in.the.hi.fidelity.first.class.travelling.set.and.i.think.i.need.a.lear.jet.money.it.is.a.secret.%C9%A2oogle.com/#.share.it.fairly.but.dont.take.a.slice.of.my.pie.money.so.they.say.is.the.root.of.all.evil.today.but.if.you.ask.for.a.rise.it%27s.no.surprise.that.they.are.giving.none.and.secret.%C9%A2oogle.com