10 ms·
Add '127.0.0.1 xn–9q8h' to /etc/hosts gives you "localghost"
- malux85 7y agoepic
- smitty1e 7y ago"Love is kinda crazy with a spooky little URL like you," said Atlanta Rhythm Section, probably.
- IHLayman 7y agoI hate to be a spoilsport, but this is a good reminder that https://en.wikipedia.org/wiki/IDN_homograph_attack https://en.wikipedia.org/wiki/IDN_homograph_attack is still possible in some domains and with some browsers and CLI tools, although some of the easier tricks to detect have been mitigated.
- DyslexicAtheist 7y agoif you run pihole or a local dnsmasq/unbound it should be possible to mitigate it by sinkholing any unicode domains, e.g. with dnsmasq (requires a patch https://github.com/spacedingo/dnsmasq-regexp_2.76 https://github.com/spacedingo/dnsmasq-regexp_2.76) you can do this: address=/:xn--*:/0.0.0.0 does anyone know if something like this is possible with unbound?
- IHLayman 7y agoThat's a good hack that I'll have to play with tonight. Thank you!
- rahuldottech 7y agoBut... What about legit unicode domains? I own a couple that I use for personal projects or file sharing.
- DyslexicAtheist 7y agoindeed those would get thrown under the bus. it's a trade-off and depends on how paranoid you want to be.
- archi42 7y agoTwo ideas to lessen the trade-off: 1. Use a browser extension that throws a warning on all unicode domains (maybe even with unicode highlighting). Drawback: Needs to be done per-device. 2. Let your pihole MitM all https traffic with a certificate you do NOT trust (maybe create one per domain, so you can add it to the trusted list); if the connection is over http, upgrade it to https (if the server doesn't speak https, proxy it). Drawback: It's much more complicated, and if your bank happens to be called e.g. "Bank of Zürich" you still need to take a look at the IDN to determine if you're on the right website (or add an exception).
- chupasaurus 7y agoModification of 2nd idea. Run two dnsmasq servers: one which would do resolving and listening on loopback interface, and other listening 53/udp with no-resolv, whitelist of IDNs and filtering rules to pass normal and block other punycode DNs.
- DyslexicAtheist 7y agoI came up with another "solution" using the linux kernel NFQUEUE: https://news.ycombinator.com/item?id=22003933 https://news.ycombinator.com/item?id=22003933
- kylek 7y agoI've never seen a legit unicode domain personally, but, is this not compatible with whitelisting specific domains? (in pihole, anyways...)
- dual_dingo 7y ago
- amarshall 7y agoAs far as I know, no, it’s not possible to do in Unbound since it doesn’t support regex or wildcards on part of a domain (except whole parts as in DNS itself e.g. *.foo.example).
- DyslexicAtheist 7y agoI came up with another solution to work separate from unbound/dnsmasq using the NFQUEUE in the linux kernel. I basically am processing the dns packets in user-land :) ... bit of a hack but it made for a great afternoon https://news.ycombinator.com/item?id=22003933 https://news.ycombinator.com/item?id=22003933
- jiveturkey 7y agotip of the decade!
- shawkinaw 7y agoThis is using Punycode encoding, see https://en.m.wikipedia.org/wiki/Emoji_domain https://en.m.wikipedia.org/wiki/Emoji_domain.
- jackewiehose 7y agoWhy is this even a thing?
- tsavola 7y agoDo you mean Punycode, or this joke?
- DarkWiiPlayer 7y agoPunycode is the joke
- wongarsu 7y agoLimiting dns names to 26 latin characters and the 10 arabic digits is the joke. From the top of my head I can't come up with a single language other than English that doesn't use additional letters (or at least additional modifiers on some letters). Punycode is the most sane solution to an insane situation.
- PeterisP 7y agoWell, latin works, but it's not that popular outside of Vatican nowadays :)
- samatman 7y agoSwahili, Hawaiian, Italian, that's just off the top of my head, there are many others. Hawaiian uses ' as a proper letter, granted.
- Liquid_Fire 7y ago
- nottorp 7y agoAnd how do i type that in the address bar?
- billpg 7y agoIf you use Windows, [Logo]+[.]
- wongarsu 7y agoThat's a neat trick. It even has kaomoji and useful symbols ╰(°▽°)╯
- Avamander 7y agoThis sounds like the modern version of this http://bash.org/?835030 http://bash.org/?835030 quote.
- lordgrenville 7y agoWow, this is amazing! I knew about Ctrl-cmd-space on macOS, didn't know Windows had caught up.
- alangpierce 7y agoOn Mac, Control+Command+Space brings up the emoji picker. Every OS has something like that these days, I'm pretty sure.
- nottorp 7y agoHmm, so i have to press ctrl+cmd+space then scroll through the picker or type at least "gh" to find that particular emoji. Pretty once or twice I guess.
- londons_explore 7y agoUntil it goes into your frequently accessed sites list, which as a dev, I imagine it would.
- jackewiehose 7y agoIt took me a while to get the joke because I didn't recognize that white ghost on a white background. I take this as another example why these non-ascii urls are a bad idea for security.
- gruez 7y agoWhy? if you’re talking about the homograph attack, AFAIK both Firefox and Chrome use whitelisting, which for example prevents you from using the Cyrillic “a” with other Latin letters.
- icebraining 7y agoIt's not white, it's the blueish grey #E1E8ED. You need a better monitor :)
- rahuldottech 7y agoVery much depends on what browser/platform you're on. Many different emoji implementations out there.
- icebraining 7y agoNope, Twitter replaces the unicode character with an SVG image, so it should show the same for everyone.
- AndyMcConachie 7y agoNot all unicode characters are valid IDN labels. For example, emojis are not valid in IDN labels.
- daxterspeed 7y agoValid or not several emoji domains have existed since 2001 https://en.wikipedia.org/wiki/Emoji_domain https://en.wikipedia.org/wiki/Emoji_domain
- WorldMaker 7y agoAs with so many things domain name related, what is or is not valid varies by and is determined by registrar. The biggest registrars (.com, .net, .org as three examples) generally have a lot of restrictions on IDNs, whereas many countries can afford to allow just about the full gamut of Unicode if they wish.
- netsharc 7y agoHmm, I wonder if that's going to be the next battle field for URLs: Facebook will try to register its logo as an emoji, and you'd just need to go to http://[f] http://[f] to open their site. There already is an emoji for apple (the fruit, not the company). Oh the horrors. I should start an emoji NIC!
- brandonhorst 7y agoThere is already an emoji for the company: (only works on iStuff)
- manifestsilence 7y agoThese would be less than convenient to type, but perhaps as we go more and more towards a non-typing web where a walled-garden start page and predefined links lead to the most popular sites with a click, these URLs will become fashionable. I think if so, this will herald the impending death of the human-read and typed URL in favor of start page links and search results.
- JadeNB 7y ago> as we go more and more towards a non-typing web where a walled-garden start page and predefined links lead to the most popular sites with a click Just a reminder that this is backwards, not forwards: this was my first experience of the Internet, through AOL, and I imagine I'm not the only one.
- kick 7y agoThere are more mobile users than there are desktop users, and for them it's just the same to type.
- htfu 7y agoHow is switch to emoji input -> press search box -> start typing apple -> press apple symbol and so on “just the same” as app<CR>?
- banana_giraffe 7y agoInteresting, both Chrome and Firefox seem to show the Punycode encoding after I enter the emoji in the URL for me. Do browsers always show the Punycode encoding, or do they show the encoded glyphs only in some scenarios? I can't find examples of Punycode in the wild used by normal websites.
- londons_explore 7y agoI believe the config of which glyphs to show depends on the TLD. There is a hardcoded list of which character ranges are acceptable per TLD, and if any characters are outside those ranges, the xn-- form is shown instead.
- markandrewj 7y agoGhost in the shell...
- billpg 7y agoI wanted to make a new website using emojis instead of "www" as a joke about the number of syllables. ("Angry Face Angry Face Angry Face" takes the same amount of time to say "www".) Browsers kept insisting on showing this as xn--b38haa.crankybill.com, so I went with "grr" instead.
- huxflux 7y agoThis made my day!