READ: Browser Exploit That Doesn't Affect IE - Shocks The World

[TechZ]

- According to a paper recently published by Eric Johanson of the Shmoo Group, users on most Mozilla-based browsers (Firefox 1.0, Camino .8.5, Mozilla 1.6, etc), Safari 1.2.5, Opera 7.54, Omniweb 5 are victim to a complex International Domain Name [IDN] spoof. This new attack allows an attacker/phisher to spoof the domain/URLs of businesses. Every recent gecko/khtml based browser implements IDN (which is just about every browser except for Internet Explorer). The Smoo Group have created a proof of concept where the links are directed at "http://www.pаypal.com/", which the browsers punycode handlers render as www.xn--pypal-4ve.com.

[Larommi]

Share the wealth.

Now someone attack Mac so the Apple nuts shut up

[TechZ]

Theyre already attacking Mozilla. Just a matter of time...

[Vip2]

In Mozilla-based browsers type "about:config" (no quotes no spaces) in the address bar. Look for the setting "network.enableIDN" (they are listed in alphabetical order) and change it to "false".

Of course this is just a work-around and if you are patient enough to wait, the Mozilla team will probably have a real fix in less than a week.