Wouldn't ligatures be a more effective attack vector for the "Maryland -> Delaware" case? That's all that ligatures do -- render a specific sequence of characters as something else.
Wouldn't ligatures be a more effective attack vector for the "Maryland -> Delaware" case? That's all that ligatures do -- render a specific sequence of characters as something else.
We're definitely not TrueType experts and took the relatively "straightforward" approach of generating a small custom font for each mapping. If it's possible to render "Maryland" with ligatures while mapping the same string to "Delaware" in Unicode, then that's just another example of the vector. Really interesting stuff, and we'll be checking it out!
These are some very extreme examples of this that push the feature's limits:
https://news.ycombinator.com/item?id=47256810
https://news.ycombinator.com/item?id=26495059
Came here to say this, I saw the initial video and thought they used ligatures, and then I was surprised the actual post was much more complicated.