Taking control of all .io domains with a targeted registration • Hacker News Board

Re: Taking control of all .io domains with a targeted registration

#201

Post by musicnarcoman » Tue, Jul 11, 2017, 8:13 AM UTC

vertex-four wrote: post #157

vbernat wrote: post #130

Earlier quoted context omitted.

There is a more detailed followup today: https://news.gandi.net/en/2017/07/detailed-incident-report/

> These credentials were likewise not obtained by a breach of our systems and we strongly suspect they were obtained from an insecure connection to our technical partner’s web portal (the web platform in question allows access via http). This makes no sense - how did the attacker get between gandi.net and their technical partner in order to MITM them? MITMs aren't magic - simply sending an unencrypted password somewh…

> This makes no sense - how did the attacker get between gandi.net and their technical partner in order to MITM them?

On the top of my head, bgp hijacking perhaps?

> MITMs aren't magic

No. But do not trust the network. Ever.

Re: Taking control of all .io domains with a targeted registration

#202

Post by boobsbr » Tue, Jul 11, 2017, 8:13 AM UTC

hk__2 wrote: post #84

Side note: Please don’t use such gray and thin fonts. I had to modify the CSS to use black instead of #555 for the text color.

http://contrastrebellion.com/

Re: Taking control of all .io domains with a targeted registration

#203

Post by cnkk » Tue, Jul 11, 2017, 8:46 AM UTC

seems to be a bad idea to get domains from strange small countries just because they look cool.

Re: Taking control of all .io domains with a targeted registration

#204

Post by guillon » Tue, Jul 11, 2017, 8:53 AM UTC

jmelloy wrote: post #114

coldpie wrote: post #62

Earlier quoted context omitted.

As an average user, how do I know which is which? How can I tell whether .ABCXYZ is competently run and trustworthy? gTLDs & ccTLDs have to be some of the worst ideas in Internet history.

ccTLDs (Country Codes) are always two letters. gTLDs aren't. The gTLDs have a pretty strict ICANN contract they have to follow; ccTLDs are looser.

ccTLDs are loosers? Not according to their increasing registration figures.

Re: Taking control of all .io domains with a targeted registration

#205

Post by jgrahamc » Tue, Jul 11, 2017, 9:01 AM UTC

addedlovely wrote: post #155

7ewis wrote: post #126

I had a similar issue with the .IM domain three months ago. One of the four NS for the domain was not responding. Two of the guys at Cloudflare diagnosed it for me: https://twitter.com/xxdesmus/status/855858441289572353

One Cofounder of cloudflare, pretty impressed they picked up tweets directly.

Many people at Cloudflare (including myself, Matthew, Justin and others) monitor Twitter, HN and other forums carefully and reply quickly to folks.

Personally, I run a script that emails me for every HN comment that mentions Cloudflare and use Tweetdeck to monitor @cloudflare/cloudflare mentions.

Re: Taking control of all .io domains with a targeted registration

#206

Post by toyg » Tue, Jul 11, 2017, 9:11 AM UTC

paulddraper wrote: post #66

panglott wrote: post #49

Earlier quoted context omitted.

Why is that an important distinction? Is forcible expulsion and dispropriration more acceptable if the people were brought to the island as slaves and laborers in the mid-1700s?

The question is NOT about the morality of deportation, but about about the legitimacy of the UK's ownership. The only two nations that have laid claim to the territory are France and the United Kingdom. (France lost it in the Napoleonic Wars.)

https://youtu.be/UTduy7Qkvk8

Re: Taking control of all .io domains with a targeted registration

#207

Post by kbart » Tue, Jul 11, 2017, 9:26 AM UTC

averagewall wrote: post #177

walrus01 wrote: post #13

This is a huge screwup on the part of the people who run the 'root' of .IO, and their entire operation should be severely scrutinized by ICANN. In my opinion almost all of the 'weird' TLDs which are country codes that are actually operated by a third party commercial service are 95% spam and junk registrations. .TV is a good example. Technical screwups aside, the existence of .IO and the fact that it "belongs" to the…

Just about every country has had some war with people removed or killed by an occupier. America, for instance.

So? That doesn't make it right anyway.

Re: Taking control of all .io domains with a targeted registration

#208

Post by jodrellblank » Tue, Jul 11, 2017, 9:42 AM UTC

guillon wrote: post #204

jmelloy wrote: post #114

Earlier quoted context omitted.

ccTLDs (Country Codes) are always two letters. gTLDs aren't. The gTLDs have a pretty strict ICANN contract they have to follow; ccTLDs are looser.

ccTLDs are loosers? Not according to their increasing registration figures.

Looser != loser

Re: Taking control of all .io domains with a targeted registration

#209

Post by dorianm » Tue, Jul 11, 2017, 10:05 AM UTC

stephenr wrote: post #181

dorianm wrote: post #154

Earlier quoted context omitted.

Cloudflare For Top Level Domains? :)

Why would that be a good thing, exactly?

The same as to why Cloudflare is a good thing for managing second (and plus) domains levels.

They have great network engineers (I personally know one), maybe the best in the world.

Re: Taking control of all .io domains with a targeted registration

#210

Post by Endy » Tue, Jul 11, 2017, 10:18 AM UTC

Mithorium wrote: post #192

CydeWeys wrote: post #188

Earlier quoted context omitted.

We also have .gmail, so you can imagine some clever possibilities with that. God knows how widely a "ben@google" email address would work though. I'm going to guess not very.

True, I imagine a lot of software wouldn't know how to handle an email without a dot in the domain part That and apparently ICANN would frown upon such an implementation [1] [1] https://www.icann.org/news/announcement-2013-08-30-en

Wouldn't that work like the old Compuserve or Prodigy email addresses? And if it would, wouldn't most email clients have to have "back-compatibility" with it?