this post was submitted on 21 Sep 2024
33 points (97.1% liked)

Home

0 readers
1 users here now

Lemmy.zip instance discussion.

For all things relating to Lemmy.zip.

Main instance rules apply, with the additional rules below:

founded 1 year ago
MODERATORS
 

Basically title, curious as I know this had been brought up a while ago but never really followed up on the topic

you are viewing a single comment's thread
view the rest of the comments
[–] BehindTheBarrier 18 points 2 months ago (5 children)

I know my job banned .zip domains as soon as they leared of it. It's an IT firm so they don't really care to take any chances, and would rather just make exceptions if needed.

[–] [email protected] 1 points 2 months ago (4 children)

I don't get what's more concerning about the .zip TLD than any other one.

[–] BehindTheBarrier 17 points 2 months ago

They are just more likely to be scam like, particularly since they can be assumed to be a file at a glance.

Even more deviously, crafty urls like this further hides what you are actually doing, like this:

https://github.com∕kubernetes∕kubernetes∕archive∕refs∕tags∕@v1271.zip

Hover it with your cursor, watch what that actually links too, no markup cheating involved. Anything before the @ is just user information. Imagine clicking that and thinking you downlodaed a tagged build, only to get a malware?

It's not the end of the world, but as a developer it makes great sense to just auto-block it to avoid an incident. The above URL is from this article, which says it's not as big of huge problem too:

https://www.theregister.com/2023/05/17/google_zip_mov_domains/

But it's kind of a death by a thousand cuts to me, because it's another thing with another set of consideration accross the internet ecosystem that one will have to deal with.

load more comments (3 replies)
load more comments (3 replies)