I tried to make "Z0rbaTHut" and the UI blocked me, but when I modified the request and forced it to sign up anyway, the account got made.
Unfortunately I lost the original web requests showing that "Z0rbaTHut" was not allowed so I am not 100% sure I found an explicit bug. (But maybe an implicit bug in that we should discourage homographic attacks?)
- Prev
- Next