3 ms·
>As it stands, someone typing in: >food in Chicago >will get a different URL than: >food in Chicago Why?
by coherentpony 13y ago
>As it stands, someone typing in:
>food in Chicago
>will get a different URL than:
>food in Chicago
Why?
- vezzy-fnord 13y agoIDN homograph attack.
- coherentpony 13y agoThanks.
- scintill76 13y agoAre you sure? I just pasted both into my UTF8-encoded Linux terminal running `od -tx1` and got the same hex octets. (Also tried in Chrome's JS terminal "<paste string>".split("").map(function(s) { return s.charCodeAt(0); }) ) It's quite probable I don't know what I'm doing, so I'd appreciate knowing how to do it properly. Also, since these strings would be typed, I'm not sure the homograph attack applies. Why would someone slip in a Cyrillic letter or something while typing the URL themselves? If extended to clickable links that displayed the pre-hash text, I could see the issue, but pudquick specifically said "someone typing in" the two URLs.