Chuck Conway

In Stories

y Flaw in Firefox

February 11, 2005 · 1 minute read

There is a security flaw that has recently been discovered in Firefox and other Mozilla-based browsers that does not affect Internet Explorer.

Mozilla browsers support the International Domain Name (IDN) standard, which uses the Unicode character set. The problem is that some Unicode characters look identical to other, more-common Unicode characters. This can make phished websites look legit, because the address on the bar looks correct.

To see the problem firsthand, go to: http://www.shmoo.com/idn/