Live data from Hacker News

The gimp.org domain has expired

gimp.org

51–60 of 96 posts

Re: The gimp.org domain has expired

#51
post #38

We should stop using the domain name system to name web pages and email addresses. It is too vulnerable to legal attacks, extralegal attacks, and simple human error. There are a bunch of decentralized possibilities out there: IPFS, Tahoe-LAFS, MaidSafe, and so on. None of them are ready yet, except (for some purposes) FreeNet and Tor Onion Services, and it's going to be a lot of work to get them to work, and probably…

No matter what system you will come up with, it will always be vulnerable to the actors trying to game the system. Like with many other cases, I think we're making the same mistake airport security does - focusing on last year's threats. We need to put more effort into winding ways to punish assholes (the technical term would be "defectors").

Re: The gimp.org domain has expired

#52
post #38

We should stop using the domain name system to name web pages and email addresses. It is too vulnerable to legal attacks, extralegal attacks, and simple human error. There are a bunch of decentralized possibilities out there: IPFS, Tahoe-LAFS, MaidSafe, and so on. None of them are ready yet, except (for some purposes) FreeNet and Tor Onion Services, and it's going to be a lot of work to get them to work, and probably…

Excellent plan. Now we only need to worry about the small matters designing an alternative system that acheives what the domain name system does without those draw-backs, and convincing people to use the new system...

There is one, and its called search. People are getting used to ask the search engine on their phones and tablets for finding websites, so the big engineer problem is remaking the service into private instances which isn't controlled by google or apple.

Re: The gimp.org domain has expired

#53
Great ! Now the GIMP team will use this opportunity to create their own version of a "domain". I will look & work mostly like all other domains, but just mostly. Like you will not be allowed to directy save a change to its structure...

Re: The gimp.org domain has expired

#54
post #24

Earlier quoted context omitted.

Shouldn't the registrar do that? Namecheap sends me multiple emails when any of my domains is about to expire, it's just common business sense.

1&1 and gandi both offer automatic renewal. In fact I don't think I would use a registrar that didn't offer that. More likely what happened was that the guy who was incharge disappeared and/or his credit card number changed. And when the registrar tried to renew - it couldn't and I'm sure sent tons of emails of "HEY YOU NEED TO FIX THIS". Something similar almost happened to CentOS.

Namecheap and GoDaddy also offer auto renewal. I've never heard of auto renewal not being offered.

Re: The gimp.org domain has expired

#55
post #24

Earlier quoted context omitted.

1&1 and gandi both offer automatic renewal. In fact I don't think I would use a registrar that didn't offer that. More likely what happened was that the guy who was incharge disappeared and/or his credit card number changed. And when the registrar tried to renew - it couldn't and I'm sure sent tons of emails of "HEY YOU NEED TO FIX THIS". Something similar almost happened to CentOS.

I've been with Gandi for years, absolutely love them

So far it's been rocky with me. I had a VM that I used with what I think is called GandiFlex (I set it to lower the memory during the night and increase during the day) and apparently when my VM tried to scale up the hypervisor didn't have enough memory and for some reason failed to migrate the VM to another hypervisor. This left my VM offline for many hours until I noticed it.

Gandi's customer support official response "don't use it". Gandi's management response "you are right - we don't have enough monitoring and are looking into it". With no follow ups.

At least they credited me, generously, for their latest outage in their US datacenter.

Re: The gimp.org domain has expired

#57
post #15

Gimp.org domain: Created 1997-08-04 Expires 2015-08-03. So expired 3 days ago.

If it expired three days ago, isn't there a 30 day window whithin which they can still renew?

Yeah, it gets put on hold for 45 days at which time it can be renewed. If it isn't renewed with that 45 day window, then it gets listed as "expired" and the owner still has another 30 days to renew it.

Once it goes beyond these two phases, it enters into the "pending delete" phase at the end of which, it's released and open to get hijacked by someone else.

They still have plenty of time to renew it without issue.

Re: The gimp.org domain has expired

#58
post #38

We should stop using the domain name system to name web pages and email addresses. It is too vulnerable to legal attacks, extralegal attacks, and simple human error. There are a bunch of decentralized possibilities out there: IPFS, Tahoe-LAFS, MaidSafe, and so on. None of them are ready yet, except (for some purposes) FreeNet and Tor Onion Services, and it's going to be a lot of work to get them to work, and probably…

No matter what system you will come up with, it will always be vulnerable to the actors trying to game the system. Like with many other cases, I think we're making the same mistake airport security does - focusing on last year's threats. We need to put more effort into winding ways to punish assholes (the technical term would be "defectors").

You don't have to be an asshole to forget to renew your domain name, which is probably what happened here. Or to die without heirs who care. Or to not properly maintain your RAID, which is apparently what happened at SourceFarce. Are you suggesting we should be punishing ICANN and EMC? Probably the only practical way to "punish" them is to build a system that decentralizes the control out of their hands.

Re: The gimp.org domain has expired

#59
post #38

We should stop using the domain name system to name web pages and email addresses. It is too vulnerable to legal attacks, extralegal attacks, and simple human error. There are a bunch of decentralized possibilities out there: IPFS, Tahoe-LAFS, MaidSafe, and so on. None of them are ready yet, except (for some purposes) FreeNet and Tor Onion Services, and it's going to be a lot of work to get them to work, and probably…

Is there a good alternative idea?

I don't know about "good", but there are Namecoin, based on bitcoin-like blockchains, and P2P DNS, based on torrent-like protocols. Some people run alternative DNS servers, without the sanction of ICANN. TOR hidden services directories might also be evolved into something similar to a DNS competitor.

The current DNS system is based on a central service authority, which creates a monopoly on an artificially scarce resource. If the whole web went IPv6 and no web server had to share an IP with another, private address book names, shared via social connections, could handle the naming of everything out on the long tail of site popularity, and the largest sites could continue using whatever makes the most money for them. I can input names myself to attach to the phone numbers I know, and pass them to a friend with a NFC tap or message, so I could potentially also do that for IP address numbers.

I don't particularly want my ability to use the web controlled by ICANN as a single central authority, especially as I perceived the recent TLD sale as a blatant cash grab. The central authority has to be trustable, and I don't fully trust it.

Re: The gimp.org domain has expired

#60
post #24

Earlier quoted context omitted.

Shouldn't the registrar do that? Namecheap sends me multiple emails when any of my domains is about to expire, it's just common business sense.

1&1 and gandi both offer automatic renewal. In fact I don't think I would use a registrar that didn't offer that. More likely what happened was that the guy who was incharge disappeared and/or his credit card number changed. And when the registrar tried to renew - it couldn't and I'm sure sent tons of emails of "HEY YOU NEED TO FIX THIS". Something similar almost happened to CentOS.

Some domain registrars send postal notices. However they don't charge discount pricing.
Post reply on HN