Simple Machines Community Forum

Customizing SMF => Modifications and Packages => Topic started by: Sesquipedalian on May 09, 2022, 02:46:12 PM

Title: Spoof Detector
Post by: Sesquipedalian on May 09, 2022, 02:46:12 PM
Link to the mod (https://custom.simplemachines.org/index.php?mod=4329)

Spoof Detector

A modification for SMF 2.1 that detects and prevents the use of Unicode character spoofing (https://unicode.org/reports/tr36/#visual_spoofing) to cause mischief.

There are two main features of Spoof Detector:


Spoof Detector uses the Unicode Consortium's official list of "confusable characters" (https://unicode.org/Public/security/latest/confusables.txt) to detect spoofing attempts.


Settings

Before the mod will take effect, the admin must go to Administration Center ► Modification Settings ► Spoof Detector and run the Build Spoof Detector Lists task. This will download the latest version of the "confusable characters" list and use it to build and store a list of visually unambigous versions of members' display names.

Once that step has been completed, the following settings can be used:



Notes



License

Spoof Detector is released under the MIT License. A full copy of this license is included in the package file.


Changelog

Version 1.1:

Version 1.0:
Title: Re: Spoof Detector
Post by: -Rock Lee- on May 10, 2022, 09:30:20 PM
Well, since I'm trying to update all my translations, I'll leave the Spanish here (Latam and es) if I don't lose practice :P.


Regards!
Title: Re: Spoof Detector
Post by: Sesquipedalian on May 11, 2022, 12:06:36 AM
Thanks, @-Rock Lee-. I will add these and post an update soon.
Title: Re: Spoof Detector
Post by: Sesquipedalian on May 11, 2022, 04:14:58 PM
@-Rock Lee-, there are mistakes in two of the translated strings that you provided:


In both cases, these strings are not confusable with one another, so different examples are needed.

To fix the translation for $txt['spoofdetector_desc'], please choose one word or the other, and then simply replace a Latin letter "a" with a Cyrillic letter "а" in the second occurrence.

To fix the translation for $txt['spoofdetector_censor_help'], please use two Spanish words that are spelled the same, except that one word has the letter "m" where the other word has the letters "rn". For example, "amas" and "arnas" might work, or "matemos" and "maternos", or something like that.
Title: Re: Spoof Detector
Post by: -Rock Lee- on May 11, 2022, 08:56:05 PM
I was guided more by the examples, but at the time of translating them they were not clear, so I used another one that could be understood and fulfilled the idea. But it still sounded somewhat shocking because I couldn't find a possible translation, with those types of examples in Spanish (at least in Argentine) because very few words can really be confused in practice, many synonyms are used when naming them. I am going to investigate what word might be used and understood, I also did not want to use one that only appears in very specific examples without making clear what it refers to  (Spanish against technical English falls to pieces :'().
Title: Re: Spoof Detector
Post by: Sesquipedalian on May 11, 2022, 09:30:59 PM
If you think other examples would be better for Spanish, that's fine. The important part is that the example words must be visually confusable. The meaning of the example words is irrelevant. Another set of Spanish examples is "carnada" and "camada". No one would think they mean the same thing, but they look very similar in many fonts.
Title: Re: Spoof Detector
Post by: Sesquipedalian on August 31, 2023, 03:05:23 PM
This mod has been updated with Unicode 15 data, and it now detects and prevents attempts to spoof reserved names. For example, if "admin" is a reserved name, Spoof Detector will prevent users from setting their name to "αdmin" (Greek "α"), "аdmin" (Cyrillic "а"), etc.