Posts Tagged ‘Unicode spoofing’

Chris Weber: Unicode attacks and test cases: IDN and IRI display, normalization and anti-spoofing

Internationalized Resource Identifiers (IRI’s) are a new take on the old URI (Uniform Resource Identifier), which through RFC 3986 restricted domain names to a subset of ASCII characters – mainly lower and upper case letters, numbers, and some punctuation. IRI’s were forecasted many years ago by Martin Dürst and Michel Suignard, and formalized in RFC […]

Chris Weber: Unicode attacks and test cases – Visual Spoofing, IDN homograph attacks, and the Mixed Script Confusables

More on lookalikes, confusables, IDN homograph attacks, and other fun stuff, continued from the previous post.
Mixed-script confusables
These occur when letters from one alphabet or script, are used to give the same visual appearance as letters from a completely different script.  For example, the following words contain a mix of Latin and Cyrillic letters […]