Hacker News new | ask | show | jobs
by recursor 2908 days ago
Hypothetical:

Might a bad actor user something like this, combined with a homograph domain, to conceal malicious content in the URL and prevent a crawler discovering the malicious content (ignoring the fact that the homograph might be detected/redflagged on its own).

(use case might be a homograph phishing site, with a fakelogin and the target for the captured input being obfuscated into the URL)

---- Note: Homograph effectiveness depends on the browser, which you'd hope all be improving detection over time- https://dev.to/loganmeetsworld/homographs-attack--5a1p