lemmy.fmhy.ml is gone [update from the team]

theskyisfalling, 10 months ago

All of my posts on other instances are gone now :/

Blaze, 10 months ago

Posting here for visibility as I guess most people on Lemmy are not on Firefish/Mastodon

Monologue, 10 months ago

glad to see them not go down the vlemmy path

spaduf, 10 months ago

What happened to vlemmy?

Geth, 10 months ago

Nobody really knows for sure. It just sort of disappeared one day with no warning.

Gork, 10 months ago

Is this going to be an unsolved mystery of the Internet? A spooky Fediverse legend?

Blaze, 10 months ago

Yes, that’s reassuring. Also, nice to see their main website, I never actually noticed it existed

JshKlsn, 10 months ago

Damn, lemmy.zip, eh? If that instance is public, I don’t see that being a good thing.

Tons of businesses, people, etc, are all banning .zip and .mov TLDs for security purposes. I’ve personally banned all those domains from my network as well.

Bold move.

Monologue, 10 months ago

i don’t doubt there have been a lot of cases of those tlds used for scams but i haven’t been negatively effected by this instances domain name.

feel free to read the discussion about it here though

JshKlsn, 10 months ago

I can’t open that link because I block .zip domains lol

nodiet, 10 months ago

What’s the issue with those TLDs?

JshKlsn, 10 months ago

trendmicro.com/…/future-exploitation-vector-file-…

Actually really huge security threats. It’s a very good idea to block them. I especially did because my girlfriend works for the government and does some secret stuff that can’t really get out, and she deals with a ton of real .zip files. I think everyone regardless of who they are should make sure to block them.

JoeyJoeJoeJr, 10 months ago

See youtu.be/GCVJsz7EODA and youtu.be/V82lHNsSPww

There are a few problems, but I believe the biggest issue is that .zip and .mov are valid and common file extensions, and it’s common for people to write something like ‘example dot zip’ or ‘attachment dot mov’ in emails, tweets, etc. Things like email clients have features where they automatically convert text that looks like a web address into clickable links. So now, retroactively, all those emails etc suddenly have a link, where they used to just have text, and the domains that are equivalent to those previously benign file names are being purchased by nefarious actors to exploit people unaware of the issue.

CoderKat, 10 months ago

But there’s only an issue if the software you’re using auto linkifies the domain. They often don’t and won’t. This seems like a hypothetical problem that probably doesn’t exist for most major software. I certainly know no email software is gonna auto linkify this.

If you’re curious, you can see if whatever software you’re viewing this post in auto linkifies (neither are for me): hshshssu.zip iwuf8aowk.mov

(And if we’re manually linkifying, then you don’t need to use the new TLD. Eg, not-a-virus.zip.)

JoeyJoeJoeJr, 10 months ago

At 1:30 in that second video, he shows that YouTube already converts dot zip domains, even in old comments that predate the domain’s existence. At 3:19, he shows/mentions Twitter, Reddit, Facebook, and LinkedIn. I would consider those major platforms. And keep in mind, it only takes one person downloading one file to cause major damage - the LMG hack was due to someone downloading and trying to open a fake PDF that was sent via email: youtu.be/yGXaAWbzl5A.

So yes, not everything does or will auto convert the links, but I think you are underestimating the potential for issues here.

Serinus, 10 months ago

Yeah, you have a point. I may go block those TLDs tonight.