4 ms·
Is it actually Google or is there some unicode trickery going on?
by the_mitsuhiko 10y ago
Is it actually Google or is there some unicode trickery going on?
- hemancuso 10y agoDoesn't look like a unicode trick on the app-strings I'm getting
- oh_sigh 10y agoIs there a database of homoglyphs for common fonts that one could use to write a visual string matching algorithm?
- mintplant 10y agohttp://www.unicode.org/Public/security/8.0.0/confusables.txt http://www.unicode.org/Public/security/8.0.0/confusables.txt https://github.com/codebox/homoglyph https://github.com/codebox/homoglyph http://homoglyphs.net/ http://homoglyphs.net/
- aaronmiler 10y agoFrom what I can tell, it's actually Google, but then they redirect you to a malicious URL after auth/approval
- creichert 10y agoSeems like it's allowed in the oauth form: https://pbs.twimg.com/media/C-7NlIzXUAErblp.jpg:large https://pbs.twimg.com/media/C-7NlIzXUAErblp.jpg:large