nickboucher / trojan-source

Trojan Source: Invisible Vulnerabilities
https://trojansource.codes
MIT License
1.24k stars 266 forks source link

Does an homoglyphe function concerned by Trojan source? #11

Closed ariary closed 2 years ago

ariary commented 2 years ago

I see on your examples that you introduce homoglyphes functions as a threat, but I am not sure it is in the scope of the Trojan Source paper, right?

However, how could it be detected?

ariary commented 2 years ago

Got my answer. TR39 discuss about this issue.

http://www.unicode.org/Public/security/latest/confusables.txt is a list of confusable character It helps for the detection