Weaponised Fonts (gardinerbryant.com)
submitted 4 months ago by to c/bwockchain@lemmy.ml
 

Crossposted from https://feddit.org/post/31991058

Arguably more security than privacy, but this made me think. I havent considered the use of ambiguous fonts in phishing before. Worth reading.

no comments (yet)

sorted by: hot top controversial new old
there doesn't seem to be anything here
4 comments in c/privacy@programming.dev view that post
[–] 8 points 4 months ago (1 child)

They could add a lowercase to FE-Schrift (i.e. the German licence plate typeface, which was designed to make it very difficult to make any glyph look like anything but itself) and use that for the URL field.

  • source
  • hideshow 1 child comment
  • [–] 4 points 4 months ago

    In addition, if you attempt to visit a site that is a homograph of one already in your browser history the browser should show a warning, highlight the similarity and force you to confirm you want to proceed.

  • source
  • [–] 2 points 4 months ago

    Makes sense that they can't figure out how to instruct people to change their browser's DNS settings

  • source