Well this was pretty scary. Anybody got a link to the chrome canary fix? And what about mobile browsers?

I consider myself to be quite a bit privacy concious. But how do you even protect against something like this? IMO there should be a clear opt-in unicode URL character conversion in browsers.