Introducing the Xbox community at lemmy.zip

freamon, 10 months ago

Link type 1: !xbox
Link type 2: here

Blaze, 10 months ago

Interesting concept.

By the way, I had a question for you: has anyone raised the potential security issues that the lemmy.zip domain could bring?

www.malwarebytes.com/blog/news/…/zip-domains

47_alpha_tango, 10 months ago

I’m glad you like the idea. As for the security concerns it was mentioned a couple of months ago. You can see the answer from the instance admin here.

Blaze, 10 months ago

Thanks! As another comment, I was also surprised not to find a PC gaming community on your instance, I guess it will come eventually

47_alpha_tango, 10 months ago

I’m sure someone will make one. I would however I’m not really a PC gamer and I’m not up to speed on the latest tech and games on PC. The last gaming PC I built had a GTX 750 TI that was brand new at the time.

Now I only use macOS and I’m sure you know gaming on Mac isn’t exactly ideal.

Blaze, 10 months ago

That would be great. I would like see lemmy.zip becoming the default gaming instance, instance of having gaming / games on every instance possible

quortez, 10 months ago

I personally would not, partially for the aforementioned concerns about .zip and also because Lemmy IIRC has no migration path from one instance domain to another. This is partially due to ActivityPub and partially due to it not being addressed in Lemmy core.
This is part of the reason why after FMHY.ml got disrupted, those communities could not come back online on that server.
For the time being, whenever you choose a fediverse domain, you are stuck with it, especially if you run Lemmy.

I'm not that confident in sites that choose .zip at this point in time.

Blaze, 10 months ago

That’s a fair point.

Well, I guess we’ll have to wait for the next Lemmy/Kbin dedicated gaming instance

Zeus, 10 months ago (edited 9 months ago)

personally i think that’s not a great answer

So, there is a mixed bag of thought on this that I read up on before creating the domain, but tl;dr - .zip is a valid TLD and will be recognised by all browsers etc as such. There are lots of new TLDs being created and they’ll be in the same boat.

yes, it is. .scr is also a valid executable that windows pcs will run, but i wouldn’t go about distributing programmes as such

.zip domains also come with higher levels of mandatory security and require an SSL certificate to display a webpage, which is another layer of security.

almost all websites do that now, but man-in-the-middle attacks aren’t really the issue with .zip domains

On the flip side, yes someone will probably try to fake a zip file with it and send the link around, but (and people are free to disagree with me here!) this is basic Internet security and you shouldn’t be clicking links to places you weren’t expecting.

this issue isn’t clicking links to places you weren’t expecting, but clicking a link to a place you were expecting. if i send you an email saying “i sent you the invoice.zip you asked me to”; then you’d be expecting that link to open the invoice zip file

especially on lemmy, as links often follow the format “https:⧸⧸domain.com⧸c⧸topic＠

Federation won’t be affected by anything and we’d need to be manually defederated like normal.

this is true (although anyone that has won’t see images hosted on lemmy.zip)

People/companies may decide to block .zip domains but that is a knee-jerk reaction.

i think it’s a necessary reaction. i’ve blocked (and my own, but i at least know how to disable it for specific sites). now admittedly they’re unlikely to be using lemmy^[although i have just set up a lemmy acct. for someone a similar age, and only slightly more tech-savvy], but you get the picture

Bad actors will exist (and have existed before)

yes. but giving them more attack vectors isn’t the best idea

and with the way TLDs are heading before long you’ll probably be able to generate anything as a TLD, after all they’re just name friendly pointers to an IP address.

this may be true, but A) we’re not there yet, and B) that doesn’t mean it’s a good thing (or relevant)

In summary, it’s not caused us any issues yet, I dont forsee it causing us any issues, but if it did, then we’ll cross that bridge when we get there!

this is not the best attitude, as (as @quortez says), lemmy doesn’t currently allow migration or re-federation

points 3 & 8 are the most pertinent.

(sorry it’s long, but i might link to this in future so i wanted it somewhat comprehensive)