Hacker News Reader

Comment by duskdozer | Hacker News Reader

    uBlock Origin has prevented the following page from loading:

    https://xn--gckvb8fzb.com/hold-on-to-your-hardware/

    This happened because of the following filter:

    ||xn--$document
    The filter has been found in:   IDN Homograph Attack Protection - Complete Blockage

View on HN

What a silly filter, blocking all xn domains

Shrug. First time I'd seen this. If it displayed as the original text it would have been clearer.

In this case yes but it's meant as a punycode scam prevention where common Latin alphabet letters are swapped for similar looking alternatives.

It would make it hard to spot impostor domains like "news.усомbiнаtor[.]сом" if it was. There's enough inertia for FQDNs to be strictly ASCII and any UTF-8(outside ASCII) in domain names to be felt unnatural for an URL, so most systems default to the raw "Punycode" xn-- scheme for all IDNs.

Safari at least shows the proper マリウス.com - I believe it has more complicated heuristics that boil down to "if it looks like a real script, show it, if it looks like some mangled English, show the xn-"

Kind of an interesting history to this kind of url: https://www.nic.ad.jp/ja/dom/idn.html

That whole feature is kind of paragraph 22. No legit/popular site uses it so users don't expect national characters in domain names, so no one actually hosts sites using "xn-" domains.

It may be true in the US, but don't lots of domains in Asia use xn-?

This is a filter added by you (or by an overzealous list maintainer), it does not happen by default or even with the provided additional filterlists.

Yeah, I remember going on https://filterlists.com/ one day all mad and just adding a ton because of how many ads and manipulative patterns I was dealing with

Reply on news.ycombinator.com