Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper investigates the security implications of overlapping namespaces between filenames and DNS names, specifically with the introduction of gTLDs like `.zip` and `.mov`. It enumerates potential abuse scenarios arising from DNS/filename confusion and presents empirical case studies demonstrating confusion across various software. The study identifies real-world instances of potential exploitation, highlighting the need for further research and mitigation strategies.
Registering `.zip` or `.mov` domains can lead to widespread software confusion and potential exploits, as demonstrated by the first empirical study of this subtle but pervasive security vulnerability.
The namespace for filenames and DNS names has overlapped since the introduction of DNS in 1985: \texttt{.com} was the original binary format used for DOS and CP/M systems. Recently the introduction of gTLDs such as \texttt{.zip} and \texttt{.mov}, coupled with the growing prevalence of web resources, has ignited new concerns about potential issues related to DNS and filename confusion. Thus far, the discourse on DNS/filename confusion has been piecemeal and hypothetical, making it unclear what, if any, security concerns credibly exist. To address this gap, we provide the first enumeration of how DNS/filename confusion can be abused. We then perform the first empirical case studies of DNS/filename confusion in the wild, which highlights suspected confusion across a wide range of software. Finally, based on our preliminary findings, we provide suggestions and guidance for future research on this topic.