Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The gimp.org domain has expired

gimp.org

Post reply on HN
Print view View original

91–96 of 96 posts

Re: The gimp.org domain has expired

#91

Post by simonswords82 »

icebraining wrote: post #61
wahsd wrote: post #49

Earlier quoted context omitted.

Easy? Really? I get that you are offering a service, but I can guarantee that if there were something as fundamentally and existentially important as securing my domain name, it would not be an easy thing to forget to do. I can't even begin comprehending how one forgets to do such a thing.

Some people manage dozens, or even hundreds of domains. It's quite common in the "custom website design" world for the company (often a small agency) to manage the hosting of the site and domain.

Yep, that was exactly the use case we built it for. We scratched our itch. When you've got a group of people all managing domain names/SSL certs for various customers it's very easy to lose track of one.

Re: The gimp.org domain has expired

#92

Post by simonswords82 »

zymhan wrote: post #17
simonswords82 wrote: post #14

This is exactly why we created a domain name/ssl reminder tool: http://www.expirify.com . A really easy mistake to make and very costly, I hope they get it back

How is this necessary if there is a grace period after a domain expires?

See above comment from icebraining

> Some people manage dozens, or even hundreds of domains. It's quite common in the "custom website design" world for the company (often a small agency) to manage the hosting of the site and domain.

Re: The gimp.org domain has expired

#93

Post by schumaml »

BinaryIdiot wrote: post #75

Note to self: check gimp.org on September 3rd to see if it was renewed or not. In all seriousness I'm pretty surprised they would let it lapse. Hopefully they pick it up within the grace period. It would suck for a bad actor to get ahold of it and offer up the gimp for download with, say, malware in it.

Well, Shawn has already renewed gimp.org.

This wasn't really surprising to me* - some months ago, when we discovered that gimpguru.org (no one from GIMP is connected to that site, btw) had expired and taken over by a third-party, we checked and discovered that gimp.org expires on 2015-08-03.

Personally, I firmly believe that useful change only happens when survivable incidents happen, so my only concern was whether gimp.org would be lost immediately it wasn't renewed before that date. But when someone pointed out the grace period, I thought "well, either it is renewed in time, or we will have discussions similar to those that happen right now, might be a good wakeup call".

* but yes, of course I was surprised when I couldn't connect to www.gimp.org anymore, in particular because I had some updates planned for the downloads pages, because I had simply forgotten about it. Dismissing it as a non-issue until something actually happens tneds to cuase this, apparently.

Re: The gimp.org domain has expired

#94

Post by kragen »

Turing_Machine wrote: post #86
kragen wrote: post #84

Earlier quoted context omitted.

The hyperlink URL text could contain a secure hash of the gimp.org home page. Or a revision number and the hash of a public key used to sign gimp.org home page revisions. Or of a document containing three public keys, the majority of which need to sign a home page revision for it to be considered a valid value for the link. Or, as in onion services, the hash of the public key of the server hosting the document, along…

"The hyperlink URL text could contain a secure hash of the gimp.org home page. Or a revision number and the hash of a public key used to sign gimp.org home page revisions." That would help to make sure you got the right page, but wouldn't help you find it. Your other suggestions (e.g. a list of IP addresses/ports) are basically just reimplementing DNS, but with more complexity. :-)

With more or less complexity (although that statement makes me suspect you’ve never administered BIND) — but with different failure characteristics! And hopefully better ones.

Re: The gimp.org domain has expired

#95

Post by skrebbel »

FossHub wrote: post #35
morganvachon wrote: post #29

Earlier quoted context omitted.

It seems legitimate, and I agree with their stance (if not their tone) in the "Controversy" section of their FAQ. I'd love to see them put out a tool similar to Ninite, though I don't know if they have the resources to allocate for that.

Thank you for the confidence! We can assure you that our intentions are "good". As for the Ninite suggestion, unfortunately (since FossHub is NOT after the money) we don't have the financial resources to add such a tool. Maybe later. Thanks again!

May I ask why you're running the site anonymously?

Re: The gimp.org domain has expired

#96

Post by FossHub »

skrebbel wrote: post #95
FossHub wrote: post #35

Earlier quoted context omitted.

Thank you for the confidence! We can assure you that our intentions are "good". As for the Ninite suggestion, unfortunately (since FossHub is NOT after the money) we don't have the financial resources to add such a tool. Maybe later. Thanks again!

May I ask why you're running the site anonymously?

Sure! We run the site anonymously for the same reason as others - keep phishing attempts away, minimize spam, increase the security by eliminating social hacking attempts and a few other reasons that are well-known by law enforcement agencies. We did tried to run without the "privacy" option enabled and we were forced to activate it. We acknowledge that this might raise some questions but as long as we deliver a trustworthy service this shouldn't matter too much for our users.
Post reply on HN