2 ms·
> You know that 7-zip.org is the official site. How would I know that, tho? What if 7-zip.com is the official, and 7-zip.com is a similar site with a malware?
by bmacho 3y ago
> You know that 7-zip.org is the official site.
How would I know that, tho? What if 7-zip.com is the official, and 7-zip.com is a similar site with a malware?
- HelloNurse 3y agoThe squatters just need to start saying that "seven.zip" is the new home page and 7-zip.org is deprecated instead of redirecting. It only takes some SEO to make it look plausible for many users who trust Google and see "seven.zip" as the first search result.
- freedomben 3y agothen you address it by reporting/complaining. It's already perfectly possible to do that, the only change here is a name. I'm sure there's also phishing detection (that will certainly improve with ML) that can help too. either way, what's the solution to prevention? disallow the entire TLD and every possible TLD that could lead to phishing? there are already plenty of issues with .com being used for phishing. have a regulatory body do ID verification of every registrant and if it sounds like a domain that could possibly be misused then ... what?
- AstralStorm 3y agoSaid malware would also have to be code signed with the 7-zip authors' code signing certificate. However, if you're downloading it for the first time, you wouldn't know what that correct value is.