[UA-discuss] [UA-International] IDNs and homographs attacks

Don Hollander don.hollander at icann.org
Wed May 27 19:20:15 UTC 2015


Thanks Dennis.

Interest that the article also attempts to answer the question, ³Why² - and
attributes some of the low numbers to the way that browsers display the name
­ in full punycode form.

I wonder if policies at the registry level have had any impact?

Don

From:  Dennis Tan <dtantanaka at verisign.com>
Date:  Thursday, 28 May 2015 5:17 am
To:  "c.dillon at ucl.ac.uk" <c.dillon at ucl.ac.uk>, "ua-international at icann.org"
<ua-international at icann.org>, "UA-discuss at icann.org" <UA-discuss at icann.org>
Subject:  [UA-International] IDNs and homographs attacks

ICYMI: the APWG released its Global Phishing Survey 2H2014. In it they state
³From January 2007 to June 2014 we found only nine true homographic phishing
attacks. [Š] One hundred and three IDN domain names were used for phishing
in 2H2014. None were homographic attacks.²
 
Clearly, those claiming to watch out for IDNs for spoofing attacks are
overstating the problem.
 
Link to the article and survey:
http://www.circleid.com/posts/20150527_phishing_in_the_new_gtlds/
 
 

From: Dillon, Chris [mailto:c.dillon at ucl.ac.uk]
Sent: Tuesday, May 26, 2015 10:11 AM
To: Tan Tanaka, Dennis
Cc: ua-international at icann.org
Subject: RE: Meeting notes group call 5/26
 
Dear colleagues,
 
I¹ve checked the GoDaddy article I mentioned. Actually it¹s a general
article about the small number of law enforcement cases, disputes etc.,
rather than just IDNs:
www.ionmag.asia/2015/02/the-right-rights-balance
<http://www.ionmag.asia/2015/02/the-right-rights-balance>
 
Regards,
 
Chris.

--
Research Associate in Linguistic Computing, Centre for Digital Humanities,
UCL, Gower St, London WC1E 6BT Tel +44 20 7679 1599 (int 31599)
www.ucl.ac.uk/dis/people/chrisdillon
<http://www.ucl.ac.uk/dis/people/chrisdillon>
 

From: ua-international-bounces at icann.org
[mailto:ua-international-bounces at icann.org] On Behalf Of Tan Tanaka, Dennis
Sent: 26 May 2015 15:02
To: ua-international at icann.org
Subject: [UA-International] Meeting notes group call 5/26
 
Attendees: 
- Chris Dillon
- Dusan
- Don
- Dennis
 
Notes:
1.      Re-cap i18n charter: no comments

2.      Review of DRAFT working plan:

a.      Change title of ³telling² to ³identifying² on work stream titles

b.     Chris Dillon: GoDaddy published some stats on IDN phishing. Cases are
rare.

c.      Dennis will develop ³confusable characters² item on work stream 1.

d.     Dusan will develop ³create test cases to identify UA/IDN gaps in
applications² item on work stream 2

e.     Repository of practices, gap assessment, etc. should be maintained in
ICANN wiki (Action item: Dennis to set up page and share link to group
members)

3.      Next group meeting: Tuesday, June 9 @ 13:00 UTC

 
End of notes
 
 

From:ua-international-bounces at icann.org
[mailto:ua-international-bounces at icann.org] On Behalf Of Tan Tanaka, Dennis
Sent: Tuesday, May 26, 2015 8:50 AM
To: ua-international at icann.org
Subject: [UA-International] Meeting agenda 5/26
 
 
Agenda items:
1.      Roll call

2.      Re-cap i18n charter
https://docs.google.com/document/d/1wO9ubXdg02iptqwMhacFR1UsWKjPiMizXU5M5XmW
zZc/edit?usp=sharing

3.      Review and discuss DRAFT i18n working plan
https://docs.google.com/document/d/183UHeDMvdXVUk1W_4WJOhfFqUGx0DGWa9UeReKcC
fOE/edit?usp=sharing

4.      Other items

5.      Adjourn

 
 
I18n Project Group co-Lead
Universal Acceptance: https://icann.org/universalacceptance
<https://icann.org/universalacceptance>
Join the conversation:
https://mm.icann.org/mailman/listinfo/ua-international
<https://mm.icann.org/mailman/listinfo/ua-international>
Project group archive: http://mm.icann.org/pipermail/ua-international/
<http://mm.icann.org/pipermail/ua-international/>
 
³This message (including any attachments) is intended only for the use of
the individual or entity to which it is addressed, and may contain
information that is non-public, proprietary, privileged, confidential and
exempt from disclosure under applicable law or may be constituted as
attorney work product. If you are not the intended recipient, you are hereby
notified that any use, dissemination, distribution, or copying of this
communication is strictly prohibited. If you have received this message in
error, notify sender immediately and delete this message immediately.²
³This message (including any attachments) is intended only for the use of
the individual or entity to which it is addressed, and may contain
information that is non-public, proprietary, privileged, confidential and
exempt from disclosure under applicable law or may be constituted as
attorney work product. If you are not the intended recipient, you are hereby
notified that any use, dissemination, distribution, or copying of this
communication is strictly prohibited. If you have received this message in
error, notify sender immediately and delete this message immediately.²
³This message (including any attachments) is intended only for the use of
the individual or entity to which it is addressed, and may contain
information that is non-public, proprietary, privileged, confidential and
exempt from disclosure under applicable law or may be constituted as
attorney work product. If you are not the intended recipient, you are hereby
notified that any use, dissemination, distribution, or copying of this
communication is strictly prohibited. If you have received this message in
error, notify sender immediately and delete this message immediately.²


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mm.icann.org/pipermail/ua-discuss/attachments/20150527/b77537f3/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4540 bytes
Desc: not available
URL: <http://mm.icann.org/pipermail/ua-discuss/attachments/20150527/b77537f3/smime.p7s>


More information about the UA-discuss mailing list