Google Working on Defeating Punycode Domain Exploits

[engine]

Google has said it's working on a way to identify and block fake websites using the punycode exploit. This is where fake sites target well known domains, such as google.com, by converting non-English character codes into more familiar formats.

[bbc.co.uk...]

Developers can get involved with the open source project here [github.com...]

[lucy24]

Does the BBC assume its readers don’t know what ASCII means, so they have to keep saying “non-English” as if this term had any meaning whatsoever? That’s depressing.

:: wandering off to figure out what “punycode” [tools.ietf.org] really is or does ::

[tangor]

And the list of fakes just keeps growing:

fake handbags
fake soldiers (honor)
fake news
fake websites
fake (insert flavor of the week here)

[blend27]

Well, at least we know that Goog is.... working.... can't imagine it any other way... oh wait, that was fake from the get go... MI(nternets)GA!

Add gold plated shovels, CAT5, a few beer caps and some dirt and there you go, we got real MIGA!

[engine]

I'm very pleased to hear this development going on, especially as these sites are there to steal our identities and personal details for nefarious gains.

Quite a while back i made a type-in error and didn't notice the fake site at first, although, thankfully, i didn't enter any details.

[tangor]

I wonder how this will affect the domain registrar biz...