Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Not exactly, since typos can occur anywhere in the name, not just the TLD. Hell, even without typos, you can bitsquat [1] on domains one bit away from popular site names (usually CDNs) and get some traffic because of various computer glitches. Here's a random paper I found (and skimmed) with some examples [2]

[1] https://en.wikipedia.org/wiki/Bitsquatting

[2] https://www.securitee.org/files/bitsquatting_www2013.pdf



Back in 2018, I was wondering how that paper was still relevant, considering all the new security features added to web browsers.

The consensus seemed to be that it wasn't that impactful anymore (if it ever was).

https://security.stackexchange.com/q/185435/76718




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: