Timeline for What is more safe for browsing the web: PC or smartphone?
Current License: CC BY-SA 4.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 27, 2021 at 23:36 | comment | added | forest | @KevinWheeler I don't think so since that's a control code, not just a unicode character. But you could get the same result with an IDN homograph attack. | |
| Feb 25, 2021 at 4:16 | comment | added | Kevin Wheeler | @forest is that vulnerability in unicode domain names too? | |
| May 7, 2019 at 6:12 | comment | added | Kevin |
@forest: That's beside the point. You have to assume the user is technically illiterate, because technically illiterate people are a substantial subset of the population. Therefore, attackers will target technically illiterate people unless you specifically defend them. This is why web browsers and operating systems are increasingly removing the "disable this security feature" buttons - it's the only surefire way to prevent the user from clicking on them! The technically illiterate user knows nothing of .exe and .jpg, they just know there's a "naughty girl" and they want to see her.
|
|
| May 5, 2019 at 22:34 | comment | added | forest | @gnasher729 Unfortunately, MacOS is still vulnerable to RTL unicode reversal which is far more stealthy than using a double extension like that. | |
| May 5, 2019 at 22:25 | comment | added | gnasher729 | For the naughtygirl.jpg.exe: MacOS has for many years displayed such filenames with the double extension, even if the user turned on "hide extensions", so this would never be displayed as naughtygirl.jpg. | |
| May 5, 2019 at 17:35 | comment | added | svgrafov | Love this answer, because it's the only one mentioning subscription scam. I believe this kind of scam is quite common at least in Russia. | |
| May 5, 2019 at 12:52 | history | edited | Peter | CC BY-SA 4.0 |
added 253 characters in body
|
| May 5, 2019 at 12:46 | history | answered | Peter | CC BY-SA 4.0 |