TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Detecting Malicious Unicode

40 pointsby TangerineDream7 days ago

3 comments

rurban7 days ago
I also rerported that to github some years ago and pointed them to use a library of mine to catch such confusables, libu8ident. No reaction whatsoever. Compilers and binutils didn't care neither. They don't care about strings, but even not about names.
评论 #44010070 未加载
fsflover7 days ago
Qubes OS protects from such attacks by running all software in isolated VMs and not passing the unicode symbols to the host by default, <a href="https:&#x2F;&#x2F;www.qubes-os.org&#x2F;news&#x2F;2024&#x2F;07&#x2F;13&#x2F;qubes-os-4-2-2-has-been-released&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.qubes-os.org&#x2F;news&#x2F;2024&#x2F;07&#x2F;13&#x2F;qubes-os-4-2-2-has-...</a>
评论 #44004149 未加载
graemep7 days ago
Surely the fact that the change is in a domain name (and the diff shows this) is a red flag?
评论 #44003645 未加载