Screenshots

Beschreibung

Check the current website's domain for homographs to prevent phishing. About this add-on No Homo Graph uses computer algorithms to check in real time whether the websites you visit are spelled similarly to a user-defined list of domains. If a similar match, also known as a homograph, is found, a modal window is displayed and prevents you from interacting with the website until you are aware of the risk. The window is modal only to the website; it does not prevent you from switching tabs or replacing the site entirely with another. The user-defined domain list is populated with popular domains such as PayPal, Western Union, Google, Yahoo, MyEtherWallet, and MoneyGram, and users are free to add or remove entries. For example, if you include “paypal.com” in your list, it will catch something like “paypaᶘ.com”. How “No Homo Graph” works When you visit a website, this add-on parses the second- and third-level domains from the URL and calculates their difference from domains in the user-defined list. If the domains are in trivial encoding, they are converted to Unicode. If a domain contains Cyrillic letters that look like Ascii characters, they are converted to Ascii. If the difference is below a threshold (2 permutations if the domain is fewer than 7 characters, excluding the TLD), it alerts the user that a match has been found. What are the limitations? This add-on is not foolproof. An attacker can simply make more changes to a domain until it is different enough. However, it will then be easier to spot with the naked eye. How is my information stored? All information is stored on the local computer. What is a homograph attack? See the following links: https://slashdot.org/story/02/05/28/0142248/spoofing-urls-with-unicode https://dev.to/loganmeetsworld/homographs-attack--5a1p Examples of attacks: https://xn--80aa0cbo65f.com (fake paypal.com) https://www.xn--80ak6aa92e.com (fake apple.com) http://www.xn--o1aae.com (fake cnn.com)