Google Chrome Extension Detects "Zero-Width Character" Fingerprinting Attacks

Faybert

Level 24
Thread author
Verified
Top Poster
Well-known
Jan 8, 2017
1,320
Software developer Marco Chiappetta has built a Google Chrome extension that can detect attempts to fingerprint text using the "zero-width character" technique.
The extension, named "Replace zero-width characters with emojis" is available on the official Google Chrome Web Store and on GitHub.
Zero-width characters can be used for fingerprinting
Chiappetta built the extension after reading an article penned by British security researcher Tom Ross. In his piece, Ross detailed how organizations could use zero-width characters to fingerprint sensitive text that a user might be tempted to copy-paste in an unauthorized document or another web page.
......
......
Chrome extension replaces zero-width characters with emojis
Ross published his proof-of-concept code to raise awareness to this type of attacks. Whistleblowers should take particular care.
"Depending on your line of work, it could be vitally important to understand the risks associated with copying text," Ross says. "Very little applications will try to render the zero-width characters."
Detecting such attacks usually involves using Linux command-line utilities, something that's above the skill level of most non-technical users. But this is where Chiappetta came in and created a Chrome extension that replaces zero-width characters with random emojis.
......
......
 

L0ckJaw

Level 19
Verified
Content Creator
Well-known
Feb 17, 2018
870
Are these extensions safe ? So many scam extensions out there
 
  • Like
Reactions: upnorth

upnorth

Level 68
Verified
Top Poster
Malware Hunter
Well-known
Jul 27, 2015
5,458
Good question @L0ckJaw . Check on reviews/support questions/answers not only in the webstore and how frequent it gets updates etc. A homepage with a email address or contactform is also important as a correct linked privacy policy.

Personal I would pass on this for now as it's a bit too new and placed under the Humor category. :sleep:
 
Last edited:
  • Like
Reactions: L0ckJaw

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top