Connect with us

TECH

Google’s new registered domains include .zip and .mov for a more “exciting” and insecure web.

Published

on

facial palm: According to Google itself, new generic top-level domains (gTLDs) can help self-expression, creativity and business. The previously approved list of “hundreds” of gTLD entries now contains some nasty additions such as “zip” and “mov” that can (and will) be used to target users with sophisticated phishing attacks.

Google Registry recently introduced 8 new top-level domains for “dads, graduates and techies” by adding .dad, .phd, .prof, .esq, .foo, .nexus, .zip and .mov to your growing list of some of the “most popular” gTLDs that also include .app and .dev. However, the .zip and .mov domains have sparked controversy among experts about their potential implications for the Internet and overall network security.

zip and mov gTLDs have been available in IANA DNS records since 2014, but are now publicly available thanks to Google’s involvement. Anyone can now purchase a “.zip” or “.mov” domain such as “techspot.zip”, although these two suffixes have long been used to identify Zip compressed file archives and video clip files.

The overlap between two hugely popular file formats — the Zip standard was created by Pkware in 1989, 34 years ago — and newly registered web domains will bring new security threats to the Internet ecosystem, some researchers say. Users can be fooled by malicious URLs distributed on social networks or by mail, giving cybercriminals new “creative” tools to install malware, phishing campaigns, or other nefarious activities.

Since zip and mov are now two common TLDs, Internet services and mobile applications will essentially be forced to treat text snippets like “test.zip” or “test.mov” as valid URLs to open in a web browser. Cybercriminals have already begun exploiting the new gTLDs through the now-defunct “microsoft-office.zip” phishing page designed to attempt to steal Microsoft credentials.

A new exploit tactic devised by security researchers includes the ability to use Unicode characters and the “@” symbol for user identification as a creative way to share malicious URLs that look like legitimate internet addresses. The “creative” Internet, conceived by Google as a new form of self-expression and business, seems more insecure than ever.

However, the debate among security experts is still ongoing, as some developers do not share the same “dark” view of new gTLDs. Microsoft Edge programmer Eric Lawrence said on Twitter that the level of fear-mongering about .zip and .mov domains is “comical”. Google dedicated that the risk of confusion between domains and filenames is not new, and that the Google registry provides the tools necessary to suspend or remove malicious domains in all TLDs controlled by the company.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

TECH

Verizon is ditching the mess of six ‘unlimited’ wireless plans

Published

on

Getty Images | bloomberg

Verizon is replacing its confusing mess of six “unlimited” wireless plans with one slightly less confusing options menu.

Starting tomorrow, when the new plans launch, customers choosing the new plan will have two main choices. Only the more expensive option will include access to the fastest parts of Verizon’s 5G network, and some perks that used to be included in base prices will be sold as add-ons.

Verizon said in announcement that its new line “redefines wireless freedom” and “puts an end to bloated packages.” But evaluating new plans and additional add-ons will not be easy, and maintenance may become more expensive, at least for some customers.

“If a new Verizon customer wants to recreate what used to be Verizon’s highest-tier unlimited plan, it will end up costing more than it used to,” said Roger Entner, founder of Recon Analytics. according to The Wall Street Journal.

“The way to get people to spend more is usually not math exercises,” Entner said. Financial analysts at KeyBanc Capital Markets wrote in a note to investors that trying to convince customers to pay more for Verizon’s faster mid-range 5G is “likely to be a losing battle as consumers likely know other providers will provide mid-band 5G” at no additional fees. according to Light Reading.

Unlimited Welcome has notable limitations

Verizon Unlimited Data Plans

(Ars Technica may be compensated for sales through links in this post via partnership programs.)

The cheaper of Verizon’s two new options is called Unlimited greeting– not to be confused with the current “Welcome without limits” plan. Unlimited welcome wishes cost $65 per month plus taxes and fees per line, or as little as $27 per line for family plans with at least five users. The more expensive Unlimited Plus option will cost $80 per month for a single line, or just $42 per line for plans with a minimum of five users.

Unlimited Plus is required to access what Verizon calls its 5G ultra-broadband network. Ultra-wideband provides faster speeds with Verizon’s widely available C-band spectrum and millimeter wave spectrum available in very limited areas. Unlimited Welcome will get access to 5G, but not the Ultra Wideband variety, so it won’t provide as much of an upgrade over 4G speeds.

“Unlike others, Unlimited Plus has no smartphone data limits, slows you down, or reduces the priority of your data,” Verizon said.

Another big limitation for the entry-level Unlimited Welcome plan is that it doesn’t have access to mobile hotspot usage – both plans allow unlimited phone data usage, but hotspot usage is limited on the more expensive plan and absent on the cheaper one. The more expensive plan includes 30 GB of high speed hotspot every month and slower hotspot speeds once the hotspot limit is reached.

If you go over the 30GB limit, you’ll get up to 3Mbps on 5G Ultra Wideband until the end of the month, or up to 600Kbps on non-Ultra Wideband 5G or 4G LTE.

Continue Reading

TECH

Life-size screens make video calls feel like you’re living in the same room

Published

on

Finnish company Framery’s new high-definition virtual meeting capsule is designed to recreate face-to-face conversations from a distance. Are they the future of video calls and are they really reducing the need for business travel?

Continue Reading

TECH

EU approves Microsoft deal to buy Activision Blizzard

Published

on



CNN

European regulators have approved Microsoft’s $69 billion acquisition of Activision Blizzard, giving the tech giant a win at a time when the deal is being contested elsewhere.

While the merger could hurt competition in some respects, especially in the fast-growing cloud gaming market, concessions from Microsoft were enough to allay antitrust concerns surrounding the deal, the European Commission said in a statement.

Among Microsoft’s offerings was a 10-year commitment to allow European consumers to play Activision games on any cloud gaming service. Microsoft has also pledged not to reduce the quality or content of its games available on competing streaming platforms.

“These commitments fully address the competition issues identified by the Commission and represent a significant improvement in cloud gaming streaming over the current situation,” the Commission said.

Microsoft’s deal, which would make the company the world’s third-biggest game publisher after Tencent and Sony, is being contested in the US and UK.

Continue Reading
Advertisement

Trending