Yet another Hacker News

Domain hacks with unusual Unicode characters (2018)

16 points n_plus_1_acc 1 hour ago 8 comments

n_plus_1_acc 1 hour ago | parent

Looks like HN broke the URL after submitting. Let's try again:

    https://ₛᵖ.ⓜ/

Here is the backup link:

https://shkspr.mobi/blog/2018/11/domain-hacks-with-unusual-u...

zenexer 16 minutes ago | parent

That shows up as ₛᵖ.ⓜ, so a bunch of characters are missing.

HN seems to encode it as punycode when it shouldn’t; it skipped normalization.

huhtenberg 36 minutes ago | parent

Tangentially related - 20+ years ago I managed to register a π domain under one of the primary TLDs.

As in, the registration form was accepted and the fee was charged.

Then, few days after they emailed to say that "due to technical difficulties" the registration can be registered and they have no choice but to unregister it.

I was so close, damn amateurs.

waltbosz 20 minutes ago | parent

My brother had a friend who tried to register fuck.com in the early days of the Internet, around 1994, and the registrar was confused and wanted to know why he wanted to register it. This was when the Internet was mostly universities and a .com cost $100 to register.

waltbosz 24 minutes ago | parent

I click on the link on Android Firefox and nothing happens.

mmsc 11 minutes ago | parent

On Firefox, hover-over of the link doesn't show the URL in the bottom left of the browser.

ButlerianJihad 10 minutes ago | parent

Now, please present a list of these to your grandmother, and ask her which ones are phishing, and which are legitimately from the government.

Now, present the same list to an I.T. professional with the same questions. Perhaps make sure they are not carrying any weapons before you try.

This is just one reason why visual inspection of URLs and "hover over this link" haven't been useful defenses for a long time.