4 ms·
It's not that I disagree with either you or the sibling comment, it has some potential for abuse, I just don't see it as likely - I mean what manipulation could
by davnicwil 7y ago
It's not that I disagree with either you or the sibling comment, it has some potential for abuse, I just don't see it as likely - I mean what manipulation could happen here?
If they starting suggesting I meant 'facebook.com' when I go to 'twitter.com' then I'm going to immediately stop using the product and I think most people would too. I just don't see how many near-miss cases there could be where this could be genuinely abused. It's just an attempt to help people who will and do get fooled by similar-looking domain names in phishing attacks.
This is an example of that. Obviously in this case it's not a typo attack - as you rightly point out the keys are typically too far apart - it's a potential phishing attack of the variety 'here click this link to re-enter your credit card details for your recent Ikea order, as our system lost them' hoping the user doesn't really look properly at the url bar and gets fooled.