2023年5月18日

穀歌的新注冊的域名包括. zip和。mov更“令人興奮”和不安全的互聯網研究人員正在討論新域名將如何影響網絡安全和用戶的習慣TechSpot正在慶祝其25周年。TechSpot意味著技術分析和建議你可以信任。Facepalm指:在Google自己的話說,新通用頂級域名(gTLDs)可以幫助自我表現,創造力和商業。先前批準的“好幾百”一級域名列表條目現在提供了一些麻煩添加如“zip”和“mov,”(,)可以被濫用和複雜的網絡釣魚攻擊目標用戶。穀歌注冊中心最近推出8新頂級域名“爸爸,畢業生,技術人員,”添加.dad .phd, .prof, .esq, . foo, .nexus . zip,。mov其越來越多的“最受歡迎”gTLDs包括.app和.dev。. zip和。mov域,然而,引發了一場爭論專家關於他們對互聯網和網絡整體安全的潛在後果。郵政和mov gTLDs可用在IANA的DNS記錄自2014年以來,但他們現在已經成為一般可用多虧了穀歌的參與。現在,任何人都可以購買”。郵政”或“。mov techspot“域”。郵政”,盡管兩個後綴一直用於識別zip格式的壓縮文件檔案和視頻文件。 The overlap between two, extremely popular file formats – the Zip standard was created by Pkware in 1989, 34 years ago – and the recently registered web domains will bring new security threats to the internet ecosystem, some researchers said. Users could be deceived by malicious URLs shared on social networks or by mail, giving cyber-criminals new, "creative" tools to push malware installations, phishing campaigns or other nefarious activities. As zip and mov are now two generally approved TLDs, internet services and mobile apps will be essentially forced to treat text snippets such as "test.zip" or "test.mov" like proper URLs to open in a web browser. Cyber-criminals have already started to exploit the new gTLDs, with a now-defunct phishing page at "microsoft-office.zip" designed to try and steal Microsoft Account credentials. New exploit tactics conceived by security researchers include the ability to use Unicode characters and the "@" symbol for user identification as a creative way to share malicious URLs that looks like legitimate internet addresses. The "creative" internet conceived by Google as a new form of expression and business is more insecure than ever, it seems. The debate among security experts is still ongoing, though, as some developers don't share the same "doom and gloom" sentiment about the new gTLDs. Microsoft Edge programmer Eric Lawrence said on Twitter that the level of fear-mongering about .zip and .mov domains is "just comical." Google highlighted how the risk of confusion between domains and file names is not a new one, and that Google Registry provides the tools needed to suspend or remove malicious domains across all of the TLDs the company controls.