ICANN's list of abandoned vanity TLDs, which now has about 134 entries

Re:ICANN's list of abandoned vanity TLDs, which now has abou... by DidYaWipe on Monday July 08, 2024 @04:05PM (#40909039)

Thanks. I don't really see how that's worse than today, where a bad actor can do exactly the same thing in a forum post. Typically the post shows the text you enter, but can go to any URL.

In terms of the user going to a site instead of a zip file: If a user is willing to unpack and run a random file he downloaded and give it credentials to something... what's the difference? Not being argumentative, but this seems like a stretch.

[ Parent | on HN ]

Re:ICANN's list of abandoned vanity TLDs, which now has abou... by avidiax on Monday July 08, 2024 @06:02PM (#40910225)

The difference is that many forums or chat programs will automatically linkify valid hostnames/URLs.

Now "foo.zip" is a valid URL.

You could have a forum or chat program that you think is quite safe, since it doesn't allow file uploads, and doesn't allow arbitrary link text, and this would upend that.

[ Parent | on HN ]