Internet Browsers News & Updates

[Sarkar]

MSFT should detach Edge browser from Windows 10 core operating system and move it to store so than edge can be updated without updating Windows 10 build just like Google Chrome update without android update.

Also they should make edge browser for android also as 90%+ people runs android phones. Only then edge can be popular.

 

[sumitroy]

MSFT should detach Edge browser from Windows 10 core operating system and move it to store so than edge can be updated without updating Windows 10 build just like Google Chrome update without android update.

Also they should make edge browser for android also as 90%+ people runs android phones. Only then edge can be popular.

Totally agree

 

[rahul1117kumar]

Google To Roll Out New Chrome Update Against Punycode

Google has initiated the rolling out of an update of the beta version of its Chrome browser. The last version (57.0.2987) was experiencing a flaw, making browser vulnerable to the phishing attacks.

It’s all due to the Punycode that uses special ASCII characters in URLs to output Unicode in a browser. This Punycode helps phishers to register fake domains that look familiar to the real website. As an example, it is possible to register domains such as "xn--pple-43d.com", which is equivalent to "аpple.com".

Google To Roll Out New Chrome Update Against Punycode - News18

 

[Sarkar]

You can check here whether your browser is affected by PunyCode phishing attack or not 

Hey there!

If URL in browser is showing as apple.com with a secure connection (though this site is nowhere related to Apple.Inc)  then your browser is affected  :hello

 

[sumitroy]

You can check here whether your browser is affected by PunyCode phishing attack or not 

Hey there!

If URL in browser is showing as apple.com with a secure connection (though this site is nowhere related to Apple.Inc)  then your browser is affected  :hello

yes it shows apple.com in chrome 57.0.2987.133 x64 bit but shows (xn--80ak6aa92e(dotcom)) in ms edge

 

[Sarkar]

yes it shows apple.com in chrome 57.0.2987.133 x64 bit but shows (Hey there!) in ms edge

So MSFT is right, Edge is more secure than chrome  :s

 

[sumitroy]

So MSFT is right, Edge is more secure than chrome  :s

yes now I'm considering to use ms edge. This type of security issue can easily mislead any one or can lead to a duplicate clone malicious website

 

[Sarkar]

This flaw is there from 2011 and still Google and Firefox have not fixed it, at last google responded by issuing a patch in beta channel where as Firefox is still debating whether they should fix it or not. :dodgy

 

[sumitroy]

 

[Sarkar]

As Mozilla is currently still discussing a fix, but in the meantime, users have an option that will disable Punycode support and mitigate this attack. 

Step 1: Type about: config (without space before config word)in the Firefox address bar and hit enter.
Step 2: Type network.IDN_show_punycode and set this option to “true” (by double-clicking on it).


I think Every Firefox user should do this immediately in their browser considering the severity of this issue