Free Safari plugin to detect IDN url spoofs

[SPeedY_B]

As mentioned on the front page and Windows Security section, there's a new exploit which affects most browsers except IE (ooooh) this of course, includes Safari for the Mac.

Until Apple issue an official patch/update, you can get a free app from the following URI which will help prevent any security breaches from this exploit: http://haoli.dnsalias.com/Saft/Download/

 

[Geffy]

cool, I will install this on my mac shortly

 

[SPeedY_B]

Would seem it works, just tried the proof of concept links:

 

[NetRyder]

Excellent :up:

 

[SPeedY_B]

It's not perfect though, it was throwing up the message at me whilst using Google earlier... not had a problem since (with google or any other site). As long as it stops the genuine spoofs though, all is well

 

[X-Istence]

I just don't trust any site anymore .

I don't trust sites linked in email messages in the first place, and that is where most the spoofs are coming from.

Punycode was created for the wrong reasons, DNS is ASCII, which is not bad in particular, except that it does not support umlauts and other characters. So what needs to happen is DNS needs to support unicode characters.