Uploaded December 2025 | Updated September 2026, 2 weeks ago
Of course there's yet another phishing strategy you have to watch out for 😫
Sponsored: Use code DH2300CM to get 15% off for NAS DH2300 from 12/8 to 12/28
UGREEN NAS on Official Store (up to 15% off): nas.us.ugreen.com/Z2fB6g
UGREEN NAS DH2300 (15% off): amzn.to/47oA8ph
UGREEN NAS Series (up to 15% off): amzn.to/4o5NttN
Links Mentioned:
* My Unicode Domain Warning Extension: chromewebstore.google.com/detail/khijgpndoffkmanglickjbnkbjimcdhn
* My GitHub Repo: github.com/ThioJoe/Simple-Chrome-Extension-Utilities
* The original article: varonis.com/blog/bidi-swap
There's a new way hackers can exploit how browsers display domain names to spoof the domain and make it look completely different than it actually is, often even showing the name of a legitimate site. It takes advantage of "right to left" language characters to change how the domain is visually displayed, and current protections for "internationalized" domain names aren't foolproof. In this video I explain how it works and show you how you might be able to protect yourself, since Chrome doesn't provide this option, unlike Firefox. I even made a simple extension to add this protection.
Timestamps:
0:00 - Intro
0:57 - How The Trick Works
2:16 - Internationalized Domain Names
3:56 - Very Good Thing
5:28 - My Chrome Extension
6:51 - Some Things to Point Out
Of course there's yet another phishing strategy you have to watch out for 😫
Sponsored: Use code DH2300CM to get 15% off for NAS DH2300 from 12/8 to 12/28
UGREEN NAS on Official Store (up to 15% off): nas.us.ugreen.com/Z2fB6g
UGREEN NAS DH2300 (15% off): amzn.to/47oA8ph
UGREEN NAS Series (up to 15% off): amzn.to/4o5NttN
Links Mentioned:
* My Unicode Domain Warning Extension: chromewebstore.google.com/detail/khijgpndoffkmanglickjbnkbjimcdhn
* My GitHub Repo: github.com/ThioJoe/Simple-Chrome-Extension-Utilities
* The original article: varonis.com/blog/bidi-swap
There's a new way hackers can exploit how browsers display domain names to spoof the domain and make it look completely different than it actually is, often even showing the name of a legitimate site. It takes advantage of "right to left" language characters to change how the domain is visually displayed, and current protections for "internationalized" domain names aren't foolproof. In this video I explain how it works and show you how you might be able to protect yourself, since Chrome doesn't provide this option, unlike Firefox. I even made a simple extension to add this protection.
Timestamps:
0:00 - Intro
0:57 - How The Trick Works
2:16 - Internationalized Domain Names
3:56 - Very Good Thing
5:28 - My Chrome Extension
6:51 - Some Things to Point Out
