Google Working on Defeating Punycode Domain Exploits

Forum Moderators: open

Message Too Old, No Replies

Google Working on Defeating Punycode Domain Exploits

engine

5:56 pm on Feb 1, 2019 (gmt 0)

Google has said it's working on a way to identify and block fake websites using the punycode exploit. This is where fake sites target well known domains, such as google.com, by converting non-English character codes into more familiar formats.

[bbc.co.uk...]

Developers can get involved with the open source project here [github.com...]

lucy24

8:07 pm on Feb 1, 2019 (gmt 0)

Does the BBC assume its readers don’t know what ASCII means, so they have to keep saying “non-English” as if this term had any meaning whatsoever? That’s depressing.

:: wandering off to figure out what “punycode” [tools.ietf.org] really is or does ::

tangor

4:16 am on Feb 2, 2019 (gmt 0)

And the list of fakes just keeps growing:

fake handbags
fake soldiers (honor)
fake news
fake websites
fake (insert flavor of the week here)

blend27

1:32 pm on Feb 4, 2019 (gmt 0)

Well, at least we know that Goog is.... working.... can't imagine it any other way... oh wait, that was fake from the get go... MI(nternets)GA!

Add gold plated shovels, CAT5, a few beer caps and some dirt and there you go, we got real MIGA!

engine

4:31 pm on Feb 4, 2019 (gmt 0)

I'm very pleased to hear this development going on, especially as these sites are there to steal our identities and personal details for nefarious gains.

Quite a while back i made a type-in error and didn't notice the fake site at first, although, thankfully, i didn't enter any details.

tangor

6:03 pm on Feb 4, 2019 (gmt 0)

I wonder how this will affect the domain registrar biz...