San-Serif Rules Everything Around Me

on YouTube ↗09m

" summary

Mixed‑case sans‑serif makes lowercase l and uppercase I visually identical in Gmail, Apple iMessage, Facebook and Twitter so simple homograph phishing is possible. DNS Twist is used to enumerate swaps; a scan of Fortune 1000 finds 535 single‑L names with 447 missing L→I registrations and 605 single‑I names with 472 missing I→L registrations. Proof‑of‑concept domains for the Fortune 25 show seven unprotected targets, five were registered and hosted informational pages, and legal notices followed despite the defensive demos.

AI-written summary · about

" related talks

• 16mhijacking.gov.uk - Identifying and Communicating Risks to the Digital StateTerence Eden · Global Security Vulnerability Summit @ Open Source Summit North America 2022
• 40mCritical DNS & Domain Name Security Intelligence to Thwart CyberattacksIhab Shraim, David Conrad · RSAC 2021
• 28mFerris Bueller's Guide to Abuse Domain PermutationsRob Ragan, Kelly Albrink · BSidesSF 2019
• 56mHomoglyph-Based Attacks: Circumventing LLM DetectorsAldan Creo · NDC Security 2025
• 55mFlipping Bits: Your Credentials Are Certainly MineStök, Joohoi · NDC Security 2025
• 54mWhatsApp, Web3 and Wordle: Evolving a Digital SocietyDylan Beattie · Jfokus 2023
• 20mWhat's in a Name? Your Guide to the Wacky World of DNSAshley Sullins · DjangoCon US 2018
• 19mHow Safe Is Your Domain?Michael Kehoe · SREcon23 Asia/Pacific