Collaborate Disseminate
I’m trying to detect homograph attacks and other attacks where an attacker uses a spoof domain name that looks visually similar to a trusted domain name (e.g., bankofthevvest.com instead of bankofthewest.com).
Is there a dic… Continue reading List of visually similar characters, for detecting spoofing and social engineering attacks
Emoji are all fun and games until they cause software problems. Continue reading Here’s Why Emoji Can Break Apps
The definitive, arbitrary ranking of the latest additions to our pictorial vocabularies. Continue reading The 72 New Emoji, Ranked
Android phones are finally getting emoji that look like people. Imagine that! The post The Great iOS-Android Emoji Divide Narrows Ever So Slightly 👀 appeared first on WIRED. Continue reading The Great iOS-Android Emoji Divide Narrows Ever So Slightly 👀
I am currently designing a login for a web service. I will use a PBKDF2 implementation for hashing the passwords.
However, I intend to allow unicode for passwords, as I will have international users, which might want to use, for example, c… Continue reading Is it okay to normalize unicode passwords with NFC/NFD?
I have spam that looks like this:
мy вυddy’ѕ мoм мαĸeѕ $74/нoυr oɴ тнe lαpтop. ѕнe нαѕ вeeɴ lαιd oғғ ғor
ѕeveɴ мoɴтнѕ вυт lαѕт мoɴтн нer pαy cнecĸ wαѕ $19420 jυѕт worĸιɴɢ oɴ
тнe lαpтop ғor α ғew нoυrѕ. нere’ѕ тнe ѕιтe тo reαd мore
… Continue reading Is there a dictionary of visibly similar Unicode characters for Spam processing?
I recently learned that it is common for people to attempt SQL injections using the HTTP referrer in PHP. What other inputs do I need to protect against?
I am currently “cleaning up” incoming $_GET[] and $_POST[], and now the server’s re… Continue reading What exploit types do I need to protect against in PHP?