Email or username:

Password:

Forgot your password?
Top-level
Thomas Guyot-Sionnest

@hanser @ariadne It was easy to spot side-by-side, but what about coming across an unsuspected url? Would you have noticed it on the spot?

Some Unicode characters are even harder to distinguish than these fake slashes.

1 comment
hanser

@dermoth @ariadne

sry, I forgot the <sarcasm></sarcasm>-tags :)

Even though I think that the Unicode-slash-attack vector existed already before, without the .zip TLD.

Go Up