full-disclosure - state of homograph attacks

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20050207110618.R5279@tictactoe.unixboxen.net>
From: richard at unixboxen.net (Richard Jacobsen)
Subject: state of homograph attacks

For some reason, manually adding it to prefs.js with a text editor did not 
work for me.  However, configuring it from about:config worked for me.

Open up firefox, put about:config into the address bar, and then change
network.enableIDN to false by double clicking on it.  If it is working
successfully, you should get a message "domainname.com could not be found" 
when clicking on an IDN link.  You shouldn't need to restart your browser.

Richard

On Mon, Feb 07, 2005 at 07:40:49PM +0100, Gerald Holl wrote:
> fulldisclosure@...esearch.com wrote:
> > V.    Workaround
> > 
> > You can disable IDN support in mozilla products by setting
> > 'network.enableIDN' to false.  There is no workaround known for Opera or
> > Safari.
> 
> Hello,
> 
> I use Firefox 1.0 on GNU/Linux but the workaround doesn't work if I
> close the browser. No idea what's wrong ...
> 
> cheers,
> Gerald
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
> 

-- 
"a professional is simply one who gets paid for doing what an amateur does for
love."
																	-- Ursula K. Le Guin