Privacy Guides @lemmy.one rayon @lemm.ee 1 yr. ago

Google-hosted malvertising leads to fake Keepass site that looks genuine

arstechnica.com Google-hosted malvertising leads to fake Keepass site that looks genuine

Google-verified advertiser + legit-looking URL + valid TLS cert = convincing look-alike.

Technology @beehaw.org sylverstream @lemmy.nz 1 yr. ago

arstechnica.com /

You're viewing a single thread.

22 comments

disable unicode representation of these types of domains in firefox by flipping this setting (in about:config) from the default 'false' to TRUE:

network.IDN_show_punycode

so you see аррӏе.com instead of аррӏе.com

compare to (the real deal): apple.com
- Looks like it's already flipped to true in Librewolf, glad they seem to have some common sense compared to mozilla.
  
  Is there any good reason for a browser to mask the real URLs like that? There seems to be a trend of hiding parts of the URL people see lately.
  
  Yes, because the internet is not restricted to English letters.
  
  Just imagine you had to visit アップル instead of apple.com! And most importantly, would you trust yourself to see the difference that and say プッアル consistently without seeing the real reference?
  
  Just to be clear, I hate it when the browsers hides part of the url too. Show me the https god damn! But internationalization is a good thing, as it makes the internet accessible to more people.
  
  Stop it! The only words that matter are those that can be written in ASCII! The rest of the world just wants to scare you with gibberish letters!
  
  People who use those characters benefit from it. I imagine 點看 is more useful than xn--c1yn36f to a Chinese person. That’s also why Google displays them that way.
  
  It would be nice if browsers warned when International Domain Names were in use, and provided the option to disable punycode when first encountered.
  
  This is the big thing that should be happening, even just a little icon in the bar when it's happening to switch between the two representations.
  
  To have other languages able to be displayed in the title... e.g. https://wiki.ポケモン.com/wiki/メインページ
  
  You may have gotten me to switch browsers
- Does anyone using Mullvad Browser know why this setting is not enabled by default? I just checked. If it is important for security it should be.
- Permanently Deleted
  
  In Firefox Nightly you can iirc
- Oh so that's what punycode means, I always wondered what it meant
- Wouldn't you also be able to hover the link and check the URL in the bottom left?
- Is that disabled by default? If so, couldn't certain language packs flip the switch?

You've viewed 22 comments.