Live data from Hacker News

It's Way Too Easy to Get a .gov Domain Name

krebsonsecurity.com

141–150 of 184 posts

Re: It's Way Too Easy to Get a .gov Domain Name

#142
post #58

Earlier quoted context omitted.

Well the back of my Chase card says chase.com. If you tend to use search engines to find websites, you are trusting the search engine to give you the website for Chase Bank.

I feel like google is less likely to give me something fraudulent than e.g. the risk of me misspelling chase or the like

an attacker could purchase google ads for "chɑse.com" (note the unicode "s" instead of "s"

Re: It's Way Too Easy to Get a .gov Domain Name

#143
post #87

Earlier quoted context omitted.

In Norway, people employed by the local municipalities have email adresses that are literally of the style $firstname[.$middlename].$lastname@employee.$municipalityName.municipality.no where "employee" and "municipality" are literal strings (in Norwegian) and the others are variables. It's incredible, I've seen people with 50 character long email addresses.

Why is that incredible? It is pretty common for many institutions to have that kind of email. Universities for instance often have similar emails so that just by looking at the email you know if the person is a teacher / student / temp worker and which chair they belong to, sometimes which campus in addition. Many big companies have similar things to identify the BU of the email holder or indicate a contractor status…

it's not common to have such a long email

Re: It's Way Too Easy to Get a .gov Domain Name

#144
post #131

Earlier quoted context omitted.

You don't even need to purchase them. Anyone with a drill press can make them with impunity.

Not impunity. You have to be a class 7 manufacturer, which is pretty well regulated.

The context was illegal manufacturing, not legal. Obviously one must as you say get a SOT license in order to do things legally.

Re: It's Way Too Easy to Get a .gov Domain Name

#145

Earlier quoted context omitted.

That's not how .nyc is used or is expected to be used. It's a top-level domain, not a dotless host name. Here's an example of how it's used: https://thecity.nyc/

https://nyc.nyc , so good they domain named it twice...

Missed opportunity for ny.ny

Re: It's Way Too Easy to Get a .gov Domain Name

#146
post #17

> A review of the Top 10 most populous U.S. cities indicates only half of them have obtained .gov domains, including Chicago, Dallas, Phoenix, San Antonio, and San Diego. > Yes, you read that right: houston.gov, losangeles.gov, newyorkcity.gov, and philadelphia.gov are all still available. As is the .gov for San Jose, Calif., the economic, cultural and political center of Silicon Valley. A minor nit: Many of these ci…

Perhaps Los Angeles and Louisiana have a truce where neither one takes la.gov

Re: It's Way Too Easy to Get a .gov Domain Name

#147
post #113

Or too hard - why are they US only?

What would be the point? How often do you want to make sure you are on a government website without even caring of which country?

It's just a name, doesn't hold any special assurance for most people.

Re: It's Way Too Easy to Get a .gov Domain Name

#148
post #17

> A review of the Top 10 most populous U.S. cities indicates only half of them have obtained .gov domains, including Chicago, Dallas, Phoenix, San Antonio, and San Diego. > Yes, you read that right: houston.gov, losangeles.gov, newyorkcity.gov, and philadelphia.gov are all still available. As is the .gov for San Jose, Calif., the economic, cultural and political center of Silicon Valley. A minor nit: Many of these ci…

Just because the cities have .gov domains does not counter the fact that the other, very official looking, domains are unused and potentially available.

Sure, but the sentence:

> A review of the Top 10 most populous U.S. cities indicates only half of them have obtained .gov domains, including Chicago, Dallas, Phoenix, San Antonio, and San Diego.

Is factually wrong.

Re: It's Way Too Easy to Get a .gov Domain Name

#149

Earlier quoted context omitted.

> LA gov doesn't belong to CA gov, federalism, etc. Federalism does not exist within states but between states and the federal government. Los Angeles (whether county or city) is an administrative subdivision of the State of California, not an separate sovereignty. OTOH, Los Angeles isn't getting a .ca.gov domain because the state government doesn't want to dilute it's brand with local government websites, but that's…

While it is true that federalism is a wrong term, but there exists a general idea of independence of different levels of government. I am not sure about US constitutional arrangement, but in country where i live there there is clear and explicit concept that municipal, province and country (executive) governments are independent of each other, not subordinate. Therefore, it would be inappropriate for city to get a su…

In the united states, municipalities are subordinate to the state (equivalent to province). They generally have charters outlining distinct areas of responsibility, but usually to change the scope of that responsibility requires legislation at the state level. At each level the executive, judicial and legislative branches are separate.

Re: It's Way Too Easy to Get a .gov Domain Name

#150

Earlier quoted context omitted.

This scheme only makes economic sense if you neglect to factor in the cost of being sent to federal prison for many years.

Isn't that part of the cost with all the schemes?

Yeah, but anyone with access to a machine shop can make good machine guns, it is very easy. This is one of the lower risk approaches.
Post reply on HN