@hanser @ariadne It was easy to spot side-by-side, but what about coming across an unsuspected url? Would you have noticed it on the spot?
Some Unicode characters are even harder to distinguish than these fake slashes.
@dermoth @ariadne
sry, I forgot the <sarcasm></sarcasm>-tags :)
Even though I think that the Unicode-slash-attack vector existed already before, without the .zip TLD.
@dermoth @ariadne
sry, I forgot the <sarcasm></sarcasm>-tags :)
Even though I think that the Unicode-slash-attack vector existed already before, without the .zip TLD.