Earlier quoted context omitted.
Use an ad blocker.
I'm not sure you can on iOS? Or not in a straightforward way. If you can block YT ads on ios, would love to know
A combo of StopTheMadness and a pi-hole works well for me.
The new .zip TLD is going to cause some problems
61–70 of 90 posts
Re: The new .zip TLD is going to cause some problems
#62Here's the files you requested: https://attachment.zip
I wonder how many people will send this link by accident now
Re: The new .zip TLD is going to cause some problems
#63Honestly, I harbour just a smidgeon of hope that cases like this will nudge companies to reevaluate the whole “find text that could be a link with a missing protocol” feature and realise that it’s a terrible idea that causes more trouble than it solves. If you want a link, write a proper URL. The embedded tweet shows another problem, too: > Grrr... Because .zip is a valid TLD, it's impossible to know whether http://t…
I've only ever implemented this in hobby projects, but after a while my simple rule to detect links that are missing the protocol prefix became either having a www. prefix or having a slash after what could be a domain name.
[deleted]
Re: The new .zip TLD is going to cause some problems
#64Can someone describe a concrete vulnerability that this creates?
Message someone and mention a file with a .zip extension, like "Go to Trusted Bank and download financials.zip". Since .zip is now a TLD, software could auto-link it to https://financials.zip . The receiver will think the sender legibility linked to financials.zip for their convivence, but in fact they'll be redirected to a URL with a malicious zip file.
At least with HTML email, I can already link text to an arbitrary link. This whole thing doesn't seem that important to me.
Re: The new .zip TLD is going to cause some problems
#65Honestly, I harbour just a smidgeon of hope that cases like this will nudge companies to reevaluate the whole “find text that could be a link with a missing protocol” feature and realise that it’s a terrible idea that causes more trouble than it solves. If you want a link, write a proper URL. The embedded tweet shows another problem, too: > Grrr... Because .zip is a valid TLD, it's impossible to know whether http://t…
Isnt that a proof by direct example of what the author wanted to show ?
Re: The new .zip TLD is going to cause some problems
#66Here's the files you requested: https://attachment.zip
Rickrolling in 2008: Boisterous Synth Music and Rick Astley Rickrolling in 2023: Video is initially paused with a full title card visible, If you attempt to play it, you get 5 seconds of an AD playing before you can manually click a Skip button, then finally the synth music comes in... Yeah, it just doesn't work anymore.
Look on the bright side, https://badday.mov/ works now.
Re: The new .zip TLD is going to cause some problems
#67Dumb question, what exactly is the reason we can’t have arbitrary TLDs? Why shouldn’t I be able to register a domain like ilike.tacos? I’d really like to use my last name as a TLD so I can do firstname.lastname.
Arbitrary and numerous TLDs would make the root servers job a lot harder. As-is, the root servers serve a nearly static zone, and high traffic domains are distributed somewhat over several TLD's servers. It wouldn't be impossible to smoosh that all into one cluster, but it would be a bigger challenge than the status quo. You would also have a lot more administrative tension; there are several organizations that each run one or two letters of the root servers; getting them to all coordinate real time changes to a massive zone would be challenging. (I believe all the TLDs, and certainly all the majors are each run by one organization)
Re: The new .zip TLD is going to cause some problems
#68Weird how everyone wants to blame the TLD and not the systems that naively convert text into hyperlinks.
This is also a very pertinent point. Side note: Outlook automatically converting addresses into Bing Maps links is quite frustrating when you copy+paste dozens of addresses a day for work.
Also, copy pasting links using the title of the page as the label and putting the actual link behind a "security scan" thingie so that it is incredibly annoying to just get a blank link.
Re: The new .zip TLD is going to cause some problems
#69Here's the files you requested: https://attachment.zip
Rickrolling in 2008: Boisterous Synth Music and Rick Astley Rickrolling in 2023: Video is initially paused with a full title card visible, If you attempt to play it, you get 5 seconds of an AD playing before you can manually click a Skip button, then finally the synth music comes in... Yeah, it just doesn't work anymore.
Don’t forget the cookie popup you get before the video can start playing.
Re: The new .zip TLD is going to cause some problems
#70Here's the files you requested: https://attachment.zip
Thank heavens the person who bought that domain is Chaotic Good.
It could just as easily be configured to send a real payload if you're connecting from certain IP blocks, or if your user agent matches a certain version, etc. Advanced actors don't serve up a payload to any device that connects.