☑ Discover Homographs
☑ Formulate Evil Plan
☑ Register Malicious URL
☑ Acquire SSL Certificate
❌ Defeat #Brave

Not today 🦁

@kioken It's such a cool attack. Really loved reading about this one.
@jonathansampson what about mobile? Brave app for Android seems to be vulnerable (unless I missed an update)
@jonathansampson seems like http://www.аррӏе.com not loading on my end.
@wakest The proof of concept resource was under heavy burden today with so many requests. You may need to refresh a few times.
@jonathansampson I can't believe no one had taken it yet. That's crazy.
@jonathansampson this is a good solution, disabling IDN => Unicode rendering if homographs are detected
@jonathansampson that's a very clever attack, damn.
Glad Brave is such a security focused browser ❤