Spot the Difference?
@Emathion
Ich bin wirklich wahnsinnig vorsichtig, aber DAS würde mir auch nicht auffallen.😱
Deshalb habe ich mir angewöhnt, Links ausschliesslich nur aus meinem Passwort-Manager heraus zu öffnen.
@derteckelansich @Emathion Many sollte bei links auch einfach immer vorher sie URL anschauen.
@Emathion
Ok, with maybank it's obvious (two different glyph). But with citybank it's hard to differentiate.
@beandev @Emathion I see two different glyphs in both urls. But I couldn't say which is correct with just a quick look. I think (!) that it is the lower one.
@hetoug
Yes, but in maybank you have both together in a single name and this is a good hint.
@Emathion
@beandev @Emathion d'oh hadn't even spotted that. And I pretend to be a computer nerd. Will return my membership card and leave.
@hetoug
😂. It's ok. I love font design, so it was obvious for me (only, maybe)
@Emathion
@Emathion wow.. der ist gut. Aber ich öffne niemals einen link zu meiner Bank.
@Emathion Generally, I'd recommend re-typing the url manually, at least for the domain part.
@Emathion uhhh, that's not easy to spot.

@Emathion 1. This is because of laissez-faire practices of the .com domain

2. Don’t click links based on what the link text says

3. Don’t teach people to click on links based on that the link text says

@Emathion I still want a browser that always shows both the “pretty” domain name and the IDNA encoded domain name, so that kind of meddling is always obvious.

In practice, I only get suspicious when a link comes from something unexpected or the browser autofill of passwords doesn’t happen

@Emathion asking a pro, @gruber, is the following legit? 😇
@Emathion this was spotted early on as a likely outcome.
@Emathion Yep. It's not cyrillic though. This is an a. This is a cyrillic а.