I Drink Sweet Chilli Sauce @mahoumint - Tumblr Blog

HAPPY BDAY MIKU >< 🫶🏻💙💙💙💙💙

The world is yours

#my art ^^#hatsune miku #vocaloid #HAPPY16thBIRTHDAYMIKUUU #very rushed chibi bc I love her #stumbling upon world is mine in 2008 changed my kidself forever

battleonthebigbridge

NOT NEUVILLETTE GIVING WORDS OF ENCOURAGEMENT TO THE MELUSINES I'VE HAD ENOUGH UEUEUEUEUE

#genshin impact #neuvillette #melusine

ohnogodpls

the english and the french

#genshin impact #wriothesley #neuvillette #art by op #this is so true x)))#wrio is so real for this I aspire to drink as much tea as he does

mlem0817

Freminui quaso🥐

#genshin impact #art by op #freminet #QUASO!!!#he’s adorable

Bladie bladie bladie baddie I mean bladie

#my art ^^#honkai star rail #hsr blade #blade #honkai star rail blade #I love him #colouring is so hard for me but I had to try

luminnea

so barbieken. except chrobin. hear me out

#fire emblem awakening #robin #chrom #chrobin #art by op #FRR THIS IS THEM #chrom definitely gives ken energy at times LMAOOO

elfgrove

New Things to Beware on the Internet

On May 3rd, Google released 8 new top-level domains (TLDs) -- these are new values like .com, .org, .biz, domain names. These new TLDs were made available for public registration via any domain registrar on May 10th.

Usually, this should be a cool info, move on with your life and largely ignore it moment.

Except a couple of these new domain names are common file type extensions: ".zip" and ".mov".

This means typing out a file name could resolve into a link that takes you to one of these new URLs, whether it's in an email, on your tumblr blog post, a tweet, or in file explorer on your desktop.

What was previously plain text could now resolve as link and go to a malicious website where people are expecting to go to a file and therefore download malware without realizing it.

Folk monitoring these new domain registrations are already seeing some clearly malicious actors registering and setting this up. Some are squatting the domain names trying to point out what a bad idea this was. Some already trying to steal your login in credentials and personal info.

This is what we're seeing only 12 days into the domains being available. Only 5 days being publicly available.

What can you do? For now, be very careful where you type in .zip or .mov, watch what website URLs you're on, don't enable automatic downloads, be very careful when visiting any site on these new domains, and do not type in file names without spaces or other interrupters.

I'm seeing security officers for companies talking about wholesale blocking .zip and .mov domains from within the company's internet, and that's probably wise.

Be cautious out there.