[WARNING] The Real Risks in Google’s New .Zip and .Mov Domains

Security aside, it's just a confusingly bad idea.

The only reason .com works and isn't confusing is that with the phasing out of DOS and the move to Windows, we don't really use .com executables much anymore.

However, what if someone made a .exe top level domain? Just as stupid.

While we are at it, why don't we make top level domains like .scam or .fake? Well, actually, those would probably be weird. Or a TLD called .cash lots of scams would go there... getyourfree.cash hahahah
 
.zip has already been used successfully in phishing campaigns.

I long ago blocked .zip files from passing as attachments, but there is little I can do on the URI in an email side. Yes... this is a train wreck, and Google knew better.

If anything, this move should be understood by the world that Google is complicit with organized crime in digital identity theft, has no remorse over that fact, and will continue regardless of the impact to our lives and treasure.
 
From the OP's linked Wired article, >“I don't agree with the assertion that the new TLDs will increase the effectiveness of phishing in any meaningful way—primarily because people are already so easily fooled by URLs,” says security researcher Troy Hunt, who runs the breach-tracking service HaveIBeenPwned.<

I agree with him.

Everyone should be using a reputable DNS filtering provider right?
 
Everyone will be happy to know that the Internet has provided... and has given us one solid example of proper use of the .zip domain.

Ladies and gentlemen, I give you: https://yourmom.zip/

P.S.

For those that use the IM application Signal you'll note the IM client automatically downloads the .zip TLD links as an attachment. Like many IM clients, it auto-links .zip file attachments... and .mov attachments... both realities now broken thanks to Google with no real means of fixing it.

Because you cannot tell by parsing a single line of text (URI), the difference between a file and a directory.
 
Confusing people... MS tried with Outlook (@outlook, web site, app,...) but Google did it better this time :)
 
You must log in or register to reply here.

Similar threads

Sky-Knight
And people wonder why I hate Crowdstrike...
2 3 4
Replies
61
Views
4K
britechguy
britechguy
thecomputerguy
$300k wired and lost.
Replies
5
Views
632
Sky-Knight
Sky-Knight
GTP
Bobby Rauch on Google's new .zip domains
Replies
0
Views
525
GTP
GTP
Rosco
ssl and google workspace issue
Replies
2
Views
448
NviGate Systems
NviGate Systems
Markverhyden
Protecting your business and property.
Replies
1
Views
436
Gegen Stück
Gegen Stück
Back
Top