Linux and Spywares - lack of reading

Robin Laing Robin.Laing at drdc-rddc.gc.ca
Thu Feb 17 16:47:21 UTC 2005


Paul Howarth wrote:
> Robin Laing wrote:
> 
>> You were right to point out that this is not a virus or trojan but a 
>> problem with trust and lack of knowledge.  It is a fair exploit of a 
>> feature that was poorly implemented.
> 
> 
> In what way was it poorly implemented? How could it have been done better?
> 
> A similar trick could be done without IDN, by registering something like 
> "paypa1.com", which looks remarkably like "paypal.com" and uses only 
> regular ASCII characters.
> 
> Paul.
> 

I read the poorly implemented comment on another article Tuesday.  I 
don't remember the full details.  I will have to see if I can find the 
article again.  If I find it I will post it.

 From what I can remember is, why does an international character look 
like an english character under internationalization?  This is where 
it is poorly implemented.  But how can it be different?  Could IDN 
characters be displayed in a different color or box?  I don't know. 
This is one of those unforeseen problems with any implementation of 
software.  I haven't checked since the first day I read about the 
problem but from the article, the author states that he can see the 
differences.

-- 
Robin Laing




More information about the fedora-list mailing list