3 ms·
This particular hijack has little to do with being open/closed source (Fritz!Box was open source for many years though). They have been around forever, I don't
by orbital-decay 3y ago
This particular hijack has little to do with being open/closed source (Fritz!Box was open source for many years though). They have been around forever, I don't think custom TLDs such as .box were a thing when they chose fritz.box as the default name.
- lolinder 3y agoBut they were a thing for the past 12+ years when they manufactured most of the routers that are currently in service.
- dTal 3y agoIt has everything to do with being open/closed source. If it were open, you could trivially fix this behavior. Instead, and I quote: "the DHCP server on these modems hands out leases with the DNS suffix fritz.box, which means that domains in DNS requests are appended with the suffix. Unfortunately, this setting cannot be modified... ...The only proper way to resolve this matter in my opinion is to disable the DNS suffix by default. So far there is no indication that AVM is planning to enable this option in the near future."
- orbital-decay 3y agoWell yeah, quick mitigation is easier with open source. But the cause is still entirely on the gTLD mechanism itself. The ability to register gTLDs such as .zip is ridiculous and opens up this sort of phishing and hijacking in absolutely unforeseen places.