4 ms·
That's a clever idea, but I don't know how one would determine what "unexpected" is an increasingly international world.
by neilk 15y ago
That's a clever idea, but I don't know how one would determine what "unexpected" is an increasingly international world.
- adobriyan 15y agoCode point has script property and mixing it inside strings which aren't likely to contain multiscript code points (like filenames) is a sign of trouble.
- cbr 15y agoThen I could spell "hosts" entirely with cyrillic characters. (I'm not sure if it's possible with the word "hosts", but there's probably some word.)
- adobriyan 15y agoMaybe you could. Anyway you could do it right now as well. I doubt there is an acceptable non-heuristic solution.
- xentronium 15y agoFilenames can contain multiscript code points. E.g.: "Архив.gz" (Archive.gz)
- pavel_lishin 15y agoBut do default windows ones? I think (hope?) that the hosts file is hosts on every system, no matter which country or locale you selected - instead of, say, хозяин. Perhaps limit system folders and files to ascii-only. Doesn't solve any of the picjpg.exe issues, but it's a start.
- xentronium 15y agoTo be honest, I don't think it solves the problem of system file being modified by a process of unknown origin.
- jerf 15y agonodata told you. Highlight characters not expected in my locale. My locale right now is en_US.utf-8. In security-sensitive contexts like file names and domain names, it's not actually that hard to figure out which characters are a surprise for me. And if I have a file that is named entirely in non-ASCII-subset characters... which I do... then light them all up. It's OK. It won't be hard for users to figure out what's going on, even if only subconsciously.
- Daniel_Newby 15y agohow one would determine what "unexpected" is an increasingly international world 1. Highlight any two adjacent characters from different languages. Virtually no one needs an English word with one Cyrillic letter substituted in. 2. Highlight any word whose letters all look like they are for the current locale but is made entirely of code points from another language.