Old Vidme embeds turn into porn after domain purchase

Post by S_A_P » Fri, Jul 23, 2021, 6:49 PM UTC

jandrese wrote: post #7

oakwhiz wrote: post #4

Very amusing but I take issue with the article's claim that "Here’s (yet another) argument against using third-party embeds" - this might be an oversimpified perspective when it's actually a good argument to use subresource integrity (essentially cryptographic pinning of third party embedded content). I am unsure if this extends to every kind of resource that you could have in a web page, (ideally it should) but I co…

Video embeds tend to be especially fragile however since they're often implemented by gluing together a relatively large number of third party services. Any one of the services goes down or changes the API and the whole thing breaks. Ask any uMatrix user how much fun it is to get a video to play on some websites and just how much external crap you have to allow before you see the first frame.

Post by tyingq » Fri, Jul 23, 2021, 6:51 PM UTC

tqkxzugoaupvwqr wrote: post #20

tyingq wrote: post #11

Earlier quoted context omitted.

You could pre-pay for X years, where X is long enough to ensure you'll be dead when it expires. Edit: Seems like there's a 10 year limit in many places? I wonder if that's broad convention or an actual rule. Okay, apparently an ICANN limit for .com domains: "The expiration date of the domain registration is extended by the number of years, up to a maximum of ten years, as specified by the Registrar's requested Extend…

I can at most pay for 10 years in advance. Is this a limit of my registrar?

Post by rootusrootus » Fri, Jul 23, 2021, 6:54 PM UTC

tyingq wrote: post #23

tqkxzugoaupvwqr wrote: post #20

Earlier quoted context omitted.

I can at most pay for 10 years in advance. Is this a limit of my registrar?

On mine, I can pay for up to 10 years, but I think I can just pay twice and get 20. Edit: It seems to vary. Some places cite an ICANN limit of 10 years.

Post by LinuxBender » Fri, Jul 23, 2021, 7:00 PM UTC

ignitionmonkey wrote: post #18

LinuxBender wrote: post #15

Earlier quoted context omitted.

Could SRI be used for this? [1] [1] - https://developer.mozilla.org/en-US/docs/Web/Security/Subres...

SRI/hashing works for static content. Though it's worth mentioning it's a SUB-resource feature (images, scripts, etc.). It doesn't work for hyperlinks to other pages. Even if it did, it's a different use case. Say I link to an article by Author A that has comments in it (or even a footer, relative timestamp, sidebar, etc.). Hashing won't work as the page is always changing. I want the link to always go to Author A bu…

Post by jazzyjackson » Fri, Jul 23, 2021, 7:09 PM UTC

TekMol wrote: post #12

Domains are an area where blockchain technology could help a lot. A domain could cost a fixed amount of X per month. So you could pay 100 years upfront and be sure to not lose it in that timeframe. To move a domain,the registrar and the owner could have to sign the move. So it would not be possible anymore to lose a domain due to the regsitrar making a mistake.