Skip to content
  • Hjem
  • Seneste
  • Etiketter
  • Populære
  • Verden
  • Bruger
  • Grupper
Temaer
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Kollaps
FARVEL BIG TECH
  1. Forside
  2. Ikke-kategoriseret
  3. Happy #ICANN Reveal Fresh Hell Day!

Happy #ICANN Reveal Fresh Hell Day!

Planlagt Fastgjort Låst Flyttet Ikke-kategoriseret
icanndnsrevealdayblueteamtld
67 Indlæg 45 Posters 0 Visninger
  • Ældste til nyeste
  • Nyeste til ældste
  • Most Votes
Svar
  • Svar som emne
Login for at svare
Denne tråd er blevet slettet. Kun brugere med emne behandlings privilegier kan se den.
  • badsamurai@infosec.exchangeB badsamurai@infosec.exchange

    Happy #ICANN Reveal Fresh Hell Day! A company in the Caymans would like the TLD .pdf

    And these other spectacular submissions that surely won't end poorly: .sys .key .duo .lab .private .state .auth .conf .config .loc .log .php .url .vpn

    #DNS #RevealDay #blueTeam #tld

    ddlyh@topspicy.socialD This user is from outside of this forum
    ddlyh@topspicy.socialD This user is from outside of this forum
    ddlyh@topspicy.social
    wrote sidst redigeret af
    #35

    @badsamurai
    At this point, let's just create .exe as a honeypot and mark as phishing any domain that uses it?

    1 Reply Last reply
    0
    • badsamurai@infosec.exchangeB badsamurai@infosec.exchange

      Happy #ICANN Reveal Fresh Hell Day! A company in the Caymans would like the TLD .pdf

      And these other spectacular submissions that surely won't end poorly: .sys .key .duo .lab .private .state .auth .conf .config .loc .log .php .url .vpn

      #DNS #RevealDay #blueTeam #tld

      ddlyh@topspicy.socialD This user is from outside of this forum
      ddlyh@topspicy.socialD This user is from outside of this forum
      ddlyh@topspicy.social
      wrote sidst redigeret af
      #36

      @badsamurai
      How long before ".corn" is a thing?

      1 Reply Last reply
      0
      • badsamurai@infosec.exchangeB badsamurai@infosec.exchange

        Happy #ICANN Reveal Fresh Hell Day! A company in the Caymans would like the TLD .pdf

        And these other spectacular submissions that surely won't end poorly: .sys .key .duo .lab .private .state .auth .conf .config .loc .log .php .url .vpn

        #DNS #RevealDay #blueTeam #tld

        albi@furry.engineerA This user is from outside of this forum
        albi@furry.engineerA This user is from outside of this forum
        albi@furry.engineer
        wrote sidst redigeret af
        #37

        @badsamurai We already have DNS servers that blanket ban "unsafe" TLDs. Are we asking for even more trouble?
        If you run an org/corp, how could you not ban .pdf or .official?

        badsamurai@infosec.exchangeB 1 Reply Last reply
        0
        • albi@furry.engineerA albi@furry.engineer

          @badsamurai We already have DNS servers that blanket ban "unsafe" TLDs. Are we asking for even more trouble?
          If you run an org/corp, how could you not ban .pdf or .official?

          badsamurai@infosec.exchangeB This user is from outside of this forum
          badsamurai@infosec.exchangeB This user is from outside of this forum
          badsamurai@infosec.exchange
          wrote sidst redigeret af
          #38

          @Albi Oh def, I already blocked .gram on principle. The problem is when they target your customers, partners and supply chains outside of your network. This is commonly observed with recruiting related domains like {brand}jobs and {brand}careers. The domains remain parked, but they’ll have active MX records and never send to your org specifically.

          Then your average user or small business doesn’t have the skill or tooling to configure firewalls, NextDNS, etc. I take security by design to not just be memory safe computing, but holistic prevention at conceptual birth.

          albi@furry.engineerA 1 Reply Last reply
          0
          • viss@mastodon.socialV viss@mastodon.social

            @badsamurai see i WOULDA said these would be fantastic redteaming domains, but since ai kinda killed redteaming, its now just prompt fodder for various prompt injection attacks and phishing shits

            ai6yr@m.ai6yr.orgA This user is from outside of this forum
            ai6yr@m.ai6yr.orgA This user is from outside of this forum
            ai6yr@m.ai6yr.org
            wrote sidst redigeret af
            #39

            @Viss @badsamurai is ".wtf" a TLD yet?

            theorangetheme@en.osm.townT himysyed@littleone.littlefedi.socialH logaldeveloper@infosec.exchangeL 3 Replies Last reply
            0
            • badsamurai@infosec.exchangeB badsamurai@infosec.exchange

              @Albi Oh def, I already blocked .gram on principle. The problem is when they target your customers, partners and supply chains outside of your network. This is commonly observed with recruiting related domains like {brand}jobs and {brand}careers. The domains remain parked, but they’ll have active MX records and never send to your org specifically.

              Then your average user or small business doesn’t have the skill or tooling to configure firewalls, NextDNS, etc. I take security by design to not just be memory safe computing, but holistic prevention at conceptual birth.

              albi@furry.engineerA This user is from outside of this forum
              albi@furry.engineerA This user is from outside of this forum
              albi@furry.engineer
              wrote sidst redigeret af
              #40

              @badsamurai I already advocate for taking down/replacing/avoiding the current domain name system due to it's architecture constraints, control and censorship concerns and lack of ownership.
              From what I know the only viable alternative is namecoin, which I am not too fond of and still disagree with the way it works fundamentally.
              We need an alternative URI for an alternative DNS revolution, not just a patch on the current infrastructure.
              When we mix 2 DNS authorities together, we get problems.

              1 Reply Last reply
              0
              • ai6yr@m.ai6yr.orgA ai6yr@m.ai6yr.org

                @Viss @badsamurai is ".wtf" a TLD yet?

                theorangetheme@en.osm.townT This user is from outside of this forum
                theorangetheme@en.osm.townT This user is from outside of this forum
                theorangetheme@en.osm.town
                wrote sidst redigeret af
                #41

                @ai6yr @Viss @badsamurai It could be! 😉

                5cifigirl@indieverse.social5 1 Reply Last reply
                0
                • ai6yr@m.ai6yr.orgA ai6yr@m.ai6yr.org

                  @Viss @badsamurai is ".wtf" a TLD yet?

                  himysyed@littleone.littlefedi.socialH This user is from outside of this forum
                  himysyed@littleone.littlefedi.socialH This user is from outside of this forum
                  himysyed@littleone.littlefedi.social
                  wrote sidst redigeret af
                  #42

                  @ai6yr@m.ai6yr.org @Viss@mastodon.social @badsamurai@infosec.exchange https://en.wikipedia.org/wiki/.wtf

                  viss@mastodon.socialV 1 Reply Last reply
                  0
                  • himysyed@littleone.littlefedi.socialH himysyed@littleone.littlefedi.social

                    @ai6yr@m.ai6yr.org @Viss@mastodon.social @badsamurai@infosec.exchange https://en.wikipedia.org/wiki/.wtf

                    viss@mastodon.socialV This user is from outside of this forum
                    viss@mastodon.socialV This user is from outside of this forum
                    viss@mastodon.social
                    wrote sidst redigeret af
                    #43

                    @himysyed @ai6yr @badsamurai i own a couple .wtf domains 😄

                    1 Reply Last reply
                    0
                    • ai6yr@m.ai6yr.orgA ai6yr@m.ai6yr.org

                      @Viss @badsamurai is ".wtf" a TLD yet?

                      logaldeveloper@infosec.exchangeL This user is from outside of this forum
                      logaldeveloper@infosec.exchangeL This user is from outside of this forum
                      logaldeveloper@infosec.exchange
                      wrote sidst redigeret af
                      #44

                      @ai6yr @Viss @badsamurai my go to IP checker is https://myip.wtf/

                      viss@mastodon.socialV autoiue@mastodon.xn--cfa.xyzA 2 Replies Last reply
                      0
                      • logaldeveloper@infosec.exchangeL logaldeveloper@infosec.exchange

                        @ai6yr @Viss @badsamurai my go to IP checker is https://myip.wtf/

                        viss@mastodon.socialV This user is from outside of this forum
                        viss@mastodon.socialV This user is from outside of this forum
                        viss@mastodon.social
                        wrote sidst redigeret af
                        #45

                        @logaldeveloper @ai6yr @badsamurai hah, wtf indeed

                        1 Reply Last reply
                        0
                        • badsamurai@infosec.exchangeB badsamurai@infosec.exchange

                          @mttaggart But no one was really paying attention when CRR (Google) acquired .zip and .mov in 2013.

                          This round we're going to file those objections (string confusion).

                          No filenames, no intranet names, no assumed trust names.

                          So I hope these orgs enjoyed their $227,000 donation to ICANN.

                          https://newgtlds.icann.org/en/program-status/odr#objection-dispute-resolution

                          drwho@masto.hackers.townD This user is from outside of this forum
                          drwho@masto.hackers.townD This user is from outside of this forum
                          drwho@masto.hackers.town
                          wrote sidst redigeret af
                          #46

                          @badsamurai @mttaggart They'll get what they paid for.

                          1 Reply Last reply
                          0
                          • mustardfacial@infosec.exchangeM mustardfacial@infosec.exchange

                            @badsamurai not gonna lie, I kinda hope this one passes

                            Also the amount of numbered companies in this list is fucking staggering

                            varx@cybersecurity.theaterV This user is from outside of this forum
                            varx@cybersecurity.theaterV This user is from outside of this forum
                            varx@cybersecurity.theater
                            wrote sidst redigeret af
                            #47

                            @Mustardfacial @badsamurai Frankly, I'm a TLD accelerationist. The sooner we can have strings like "README.md" stop being auto-garbled into clickable URLs, the better.

                            1 Reply Last reply
                            0
                            • theorangetheme@en.osm.townT theorangetheme@en.osm.town

                              @ai6yr @Viss @badsamurai It could be! 😉

                              5cifigirl@indieverse.social5 This user is from outside of this forum
                              5cifigirl@indieverse.social5 This user is from outside of this forum
                              5cifigirl@indieverse.social
                              wrote sidst redigeret af
                              #48

                              @theorangetheme @ai6yr @Viss @badsamurai

                              It has been for a while! My previous masto server for several years ( that just shut down in August), was starbase80.wtf!

                              And see: https://en.wikipedia.org/wiki/.wtf

                              1 Reply Last reply
                              0
                              • badsamurai@infosec.exchangeB badsamurai@infosec.exchange

                                Happy #ICANN Reveal Fresh Hell Day! A company in the Caymans would like the TLD .pdf

                                And these other spectacular submissions that surely won't end poorly: .sys .key .duo .lab .private .state .auth .conf .config .loc .log .php .url .vpn

                                #DNS #RevealDay #blueTeam #tld

                                opha@void.lgbtO This user is from outside of this forum
                                opha@void.lgbtO This user is from outside of this forum
                                opha@void.lgbt
                                wrote sidst redigeret af
                                #49
                                @badsamurai Give me a .trans domain.
                                1 Reply Last reply
                                0
                                • badsamurai@infosec.exchangeB badsamurai@infosec.exchange

                                  Happy #ICANN Reveal Fresh Hell Day! A company in the Caymans would like the TLD .pdf

                                  And these other spectacular submissions that surely won't end poorly: .sys .key .duo .lab .private .state .auth .conf .config .loc .log .php .url .vpn

                                  #DNS #RevealDay #blueTeam #tld

                                  ewhac@mastodon.socialE This user is from outside of this forum
                                  ewhac@mastodon.socialE This user is from outside of this forum
                                  ewhac@mastodon.social
                                  wrote sidst redigeret af
                                  #50

                                  @badsamurai I call dibs on `.csv` and `.sh`.

                                  andrewg@mastodon.ieA 1 Reply Last reply
                                  0
                                  • badsamurai@infosec.exchangeB badsamurai@infosec.exchange

                                    The applicant list in case y’all want in on the and find something I’ve missed.

                                    https://newgtldprogram-aps.icann.org/applications

                                    sehaas@chaos.socialS This user is from outside of this forum
                                    sehaas@chaos.socialS This user is from outside of this forum
                                    sehaas@chaos.social
                                    wrote sidst redigeret af
                                    #51

                                    @badsamurai one of my favorites is .scam
                                    https://newgtldprogram-aps.icann.org/applications/XL2625T-T13533/summary

                                    delcj@mas.toD 1 Reply Last reply
                                    0
                                    • sehaas@chaos.socialS sehaas@chaos.social

                                      @badsamurai one of my favorites is .scam
                                      https://newgtldprogram-aps.icann.org/applications/XL2625T-T13533/summary

                                      delcj@mas.toD This user is from outside of this forum
                                      delcj@mas.toD This user is from outside of this forum
                                      delcj@mas.to
                                      wrote sidst redigeret af
                                      #52

                                      @sehaas it's kind of cute that the applicant is xyz.com llc but their website is xyz.xyz @badsamurai

                                      1 Reply Last reply
                                      0
                                      • badsamurai@infosec.exchangeB badsamurai@infosec.exchange

                                        Happy #ICANN Reveal Fresh Hell Day! A company in the Caymans would like the TLD .pdf

                                        And these other spectacular submissions that surely won't end poorly: .sys .key .duo .lab .private .state .auth .conf .config .loc .log .php .url .vpn

                                        #DNS #RevealDay #blueTeam #tld

                                        dirk@gts.0x7be.netD This user is from outside of this forum
                                        dirk@gts.0x7be.netD This user is from outside of this forum
                                        dirk@gts.0x7be.net
                                        wrote sidst redigeret af
                                        #53

                                        @badsamurai So the #ICANN doesn’t care anymore about anything?

                                        On the other hand it’s funny that THIS would be a fully valid url.

                                        https://pdf.pdf/pdf.pdf/pdf.pdf
                                        
                                        1 Reply Last reply
                                        0
                                        • badsamurai@infosec.exchangeB badsamurai@infosec.exchange

                                          Happy #ICANN Reveal Fresh Hell Day! A company in the Caymans would like the TLD .pdf

                                          And these other spectacular submissions that surely won't end poorly: .sys .key .duo .lab .private .state .auth .conf .config .loc .log .php .url .vpn

                                          #DNS #RevealDay #blueTeam #tld

                                          dd0ul@mastodon.radioD This user is from outside of this forum
                                          dd0ul@mastodon.radioD This user is from outside of this forum
                                          dd0ul@mastodon.radio
                                          wrote sidst redigeret af
                                          #54

                                          @badsamurai .exe

                                          1 Reply Last reply
                                          0
                                          Svar
                                          • Svar som emne
                                          Login for at svare
                                          • Ældste til nyeste
                                          • Nyeste til ældste
                                          • Most Votes


                                          • Log ind

                                          • Login or register to search.
                                          Powered by NodeBB Contributors
                                          Graciously hosted by data.coop
                                          • First post
                                            Last post
                                          0
                                          • Hjem
                                          • Seneste
                                          • Etiketter
                                          • Populære
                                          • Verden
                                          • Bruger
                                          • Grupper