Re: International domain names may pose threat

From: Faeren Madza (faeren@gospel.com)
Date: Mon Feb 28 2005 - 10:14:43 EST


Joe,

This doesn't have much to do with anything now, but about:config
accesses a combination of the files:

        /usr/share/galeon/default-prefs.js
        /home/joe/.galeon/mozilla/galeon/prefs.js

If you edit those, especially the default-prefs.js file, your changes
should stick. Use wisely.

Faeren.

On Wed, 2005-02-09 at 15:46 -0800, Joseph McDonald wrote:
> bill@daze.net wrote:
>
> > Security experts are warning about a new threat to Web surfers: malicious
> > Web sites that use international domain names to spoof the Web addresses
> > of legitimate sites.
>
> bummer of the summer. I guess MS is lucky they never implemented IDN...
>
> Here is a fix using the Adblock extension:
> http://users.tns.net/%7Eskingery/weblog/2005/02/workaround-for-idn-spoofing-issue.html
>
> Disabling network.enableIDN as described here:
> http://www.boingboing.net/2005/02/06/shmoo_group_exploit_.html
> doesn't seem to "stick"
>
> -joe



This archive was generated by hypermail 2.1.3 : Mon Feb 28 2005 - 23:00:01 EST