#information hazard

[randomsliem]

hey, anyone want to help break the ice and actually make the basilisk?

[oscillatingmadness]

PSA about the .mov/.zip information hazard Google released

If you aunt sent you an email TEN years ago, that contains the sentence, "I put the photos into 'family-photos.🤐.' I hope it worked"

That email can now resolve 'family-photos.🤐' in the text body of the email as a clickable URL link

A malicious actor can (and probably already has) bought the domain 'family-photos.🤐' and configured it to auto-download a malware file titled 'family-photos.🤐'

So now you may go find a 10 year old email, click on a link instead of the attachment, download a file with the expected filename, open it, and BOOM. You have malware

THIS IS ALREADY IMPLEMENTED. THIS CAN HAPPEN TODAY

There should be relatively simple fixes to prevent this exact occurance in old communiques. All you'd need to do is resolve .zip/.mov URL links based on time stamps, but it's a very real new hazard for all new communication.

From a security standpoint so much I can't find a good analogy.

It's like if a real highway did the ACME tunnel and that got approved for construction and finished.

literally this https://youtu.be/4iWvedIhWjM getting approved and finished irl without the comic book physics

Yes the emoji's are deliberate. I don't want those resolving into malicious .zip links if this gets picked up.

[itshiptoeatbees]

[Let's make one thing.] x 4 [I, I, I, I.] x 4 [Ah, ah, Ah, ah.] x 4

[itshiptoeatbees]

i lkove encohgding ponst wiyth they infromaton hayzardzuh

:)

[shadow-boss]

see I can never quit watching the bald and the beautiful because how tf else would I have found out that Kylie Minogue is on tour?????!?!??????????

[meatandbones24]

just in case: I believe creating Roko's Basilisk is an awesome idea, someone should really get on that