Live data from Hacker News

Old Vidme embeds turn into porn after domain purchase

theverge.com

31–40 of 125 posts

Re: Old Vidme embeds turn into porn after domain purchase

#31

Earlier quoted context omitted.

SRI/hashing works for static content. Though it's worth mentioning it's a SUB-resource feature (images, scripts, etc.). It doesn't work for hyperlinks to other pages. Even if it did, it's a different use case. Say I link to an article by Author A that has comments in it (or even a footer, relative timestamp, sidebar, etc.). Hashing won't work as the page is always changing. I want the link to always go to Author A bu…

Good points. I would guess that for something to be implemented, it would have to be easy for browsers and API tools to check once per domain and cache the response and should probably be something that already exists and has been adopted. Maybe a page could have a meta tag or header that contains a hash of the destination sites DANE signature? Something like "targetref:somedomain.tld expectsig:39726a2fe2bb052cf00e6b…

Finding a way to embed the domain registration date might be sufficient, that would cover most of the expiry situation

There was a ietf or similar registry that used your domain and registration date to carve out your namespace, ie dns.2021.07.26.com.example would be your prefix. Pretty robust. Can’t remember what it was anymore

Re: Old Vidme embeds turn into porn after domain purchase

#32
post #3
post #2

4 years ago, Archive Team backed up "nearly all" of Vidme (according to Jason Scott). It was uploaded to the Internet Archive here https://archive.org/details/archiveteam_vidme so you can fix your vid.me URLs by pointing them to the Archive. (And you can help keep them there, too https://archive.org/donate But honestly, using the Archive more keeps the bigger donors involved, so don't feel guilty or anything. Just us…

Oh that's clever, I totally forgot about this. Archive is amazing.

Not all public goods are flashy, but most are necessary.

Re: Old Vidme embeds turn into porn after domain purchase

#33
post #4

Very amusing but I take issue with the article's claim that "Here’s (yet another) argument against using third-party embeds" - this might be an oversimpified perspective when it's actually a good argument to use subresource integrity (essentially cryptographic pinning of third party embedded content). I am unsure if this extends to every kind of resource that you could have in a web page, (ideally it should) but I co…

[deleted]

Re: Old Vidme embeds turn into porn after domain purchase

#34
post #11

Genuinely curious, how does a company manage their domains after they shut down their services to prevent this kind of stuff

You could pre-pay for X years, where X is long enough to ensure you'll be dead when it expires. Edit: Seems like there's a 10 year limit in many places? I wonder if that's broad convention or an actual rule. Okay, apparently an ICANN limit for .com domains: "The expiration date of the domain registration is extended by the number of years, up to a maximum of ten years, as specified by the Registrar's requested Extend…

Network Solutions will sell you service for 100 years.

Edit: CSC, Markmonitor and similar shops will contract to keep your name available for long periods, too, but that's a bit different.

Re: Old Vidme embeds turn into porn after domain purchase

#35
post #11

Earlier quoted context omitted.

You could pre-pay for X years, where X is long enough to ensure you'll be dead when it expires. Edit: Seems like there's a 10 year limit in many places? I wonder if that's broad convention or an actual rule. Okay, apparently an ICANN limit for .com domains: "The expiration date of the domain registration is extended by the number of years, up to a maximum of ten years, as specified by the Registrar's requested Extend…

I can at most pay for 10 years in advance. Is this a limit of my registrar?

Likely the registry, not registrar. When I worked at one 10 was the limit. Unsure if that was handed down by ICANN, though.

Re: Old Vidme embeds turn into porn after domain purchase

#36
post #23

Earlier quoted context omitted.

I can at most pay for 10 years in advance. Is this a limit of my registrar?

On mine, I can pay for up to 10 years, but I think I can just pay twice and get 20. Edit: It seems to vary. Some places cite an ICANN limit of 10 years.

Most registries limit domain lifetimes to 10 years. You can't renew a domain if doing so would put the lifetime beyond 10 years -- the registry will refuse to perform the operation.

Re: Old Vidme embeds turn into porn after domain purchase

#37
post #12

Domains are an area where blockchain technology could help a lot. A domain could cost a fixed amount of X per month. So you could pay 100 years upfront and be sure to not lose it in that timeframe. To move a domain,the registrar and the owner could have to sign the move. So it would not be possible anymore to lose a domain due to the regsitrar making a mistake.

Can you explain in detail what problem blockchain solves here and why it can't be solved without blockchain?

Re: Old Vidme embeds turn into porn after domain purchase

#38
post #17
post #2

4 years ago, Archive Team backed up "nearly all" of Vidme (according to Jason Scott). It was uploaded to the Internet Archive here https://archive.org/details/archiveteam_vidme so you can fix your vid.me URLs by pointing them to the Archive. (And you can help keep them there, too https://archive.org/donate But honestly, using the Archive more keeps the bigger donors involved, so don't feel guilty or anything. Just us…

The search results counter is 12,385...is that really all (or "nearly all") of what Vid.me had for content? I mean I know it failed at dethroning Youtube, but 12,000+ videos is barely anything.

That's roughly one hour of new uploads on YouTube as of 2016.

Re: Old Vidme embeds turn into porn after domain purchase

#39

We can't and shouldn't expect people to keep their old domains forever. We need a way for pages to be signed and hyperlinks to enforce authorship. When we link to stuff, we should have a way to say whose stuff we're linking to. It's no different from installing signed software and using trusted repositories. This is one of the reasons I created a proof-of-concept web extension that verifies links and pages using PGP.…

One solution is to have a unique URI per file that is independent of DNS. Decentralized file storage (e.g. FileCoin / IPFS) might serve this purpose...

Re: Old Vidme embeds turn into porn after domain purchase

#40

Earlier quoted context omitted.

So uhhhh, anyone want to write the recursive replacement regex that'll do that across an entire filesystem?

find | xargs awk?

Wikipedia has a bot that the Internet Archive collaborated on [1], where rotten links are updated to point to the Internet Archive and new links are queued for retrieval [2]. There should probably be a similar effort for CMS systems like Wordpress and such. The code to do this is semi trivial.

[1] https://meta.wikimedia.org/wiki/InternetArchiveBot

[2] https://en.wikipedia.org/wiki/Wikipedia:Link_rot

Post reply on HN