Live data from Hacker News

It's Way Too Easy to Get a .gov Domain Name

krebsonsecurity.com

161–170 of 184 posts

Re: It's Way Too Easy to Get a .gov Domain Name

#162

Earlier quoted context omitted.

> Republicans in power attempt to suppress votes, especially in inner cities. Democrats do not. Citation?

Here's about a hundred: https://www.americanprogress.org/issues/democracy/reports/20... .

Great link!

It would be a lot greater if it wasn’t Hillary Clinton’s campaign manager John Podesta and George Soros saying Republicans are just evil.

Seriously, did you take even 1/2 a second to look at who the organization was? Or were you just hoping I wouldn’t?

Yea that’s ok, just downvote with a different account and ignore the point that your source was absolutely as biased as possible.

Re: It's Way Too Easy to Get a .gov Domain Name

#163

Tangent. This guy has the best and probably most read blog on cybersecurity incidents. He's smart enough to serve ads from his own domain but can't even bother to make his site mobile friendly? I've seen people pick on the sites of free tools and side projects for the same reason but somehow this gets a pass.

Does it matter? Why?

Re: It's Way Too Easy to Get a .gov Domain Name

#164
post #142

Earlier quoted context omitted.

I feel like google is less likely to give me something fraudulent than e.g. the risk of me misspelling chase or the like

an attacker could purchase google ads for "chɑse.com" (note the unicode "s" instead of "s"

Isn't the homoglyph the IPA "ɑ" character used in place of Basic Latin "a"? The homoglyph URL attack also has some downsides because Unicode is only supported for domains through an extension system, most browsers will convert the above to "xn--chse-r5b.com" after you visit the link.

Re: It's Way Too Easy to Get a .gov Domain Name

#165
post #94

Earlier quoted context omitted.

he does whatever he wants

...yeah? And? Everyone does whatever they want, not even criminal law makes it impossible to act a certain way. What's your point? It's still a terrible design choice, and it alienates a great number of potential readers.

not everything is a business, maybe he just writes blog posts for fun / himself

Re: It's Way Too Easy to Get a .gov Domain Name

#166
post #17

> A review of the Top 10 most populous U.S. cities indicates only half of them have obtained .gov domains, including Chicago, Dallas, Phoenix, San Antonio, and San Diego. > Yes, you read that right: houston.gov, losangeles.gov, newyorkcity.gov, and philadelphia.gov are all still available. As is the .gov for San Jose, Calif., the economic, cultural and political center of Silicon Valley. A minor nit: Many of these ci…

> Some cities may also use a subdomain of their states domain, which may or may not be a .gov. This reminds me of how longwinded the domain hierarchy for .us originally was. In MN (not sure if it's the same for every state), city domains were "www.ci.cityname.mn.us". Then the school district's web site was "www.cityname.k12.mn.us". Not only was the order inconsistent (why not www.k12.cityname etc.?) but sometimes the…

School districts are not always subsets of cities. Sometimes they even cross town, county, parish, or township lines.

Re: It's Way Too Easy to Get a .gov Domain Name

#167
post #55

Earlier quoted context omitted.

HN doesn't like your link's formatting. Try: http://www.pn./ or http://www.pn/

This unintentionally makes a point about how hard these domains are to use; they're not supported very well.

The problem is the closing ` is being treated as part of the URL.

Re: It's Way Too Easy to Get a .gov Domain Name

#168

Good reporting, until this paragraph: Now consider what a well-funded adversary could do on Election Day armed with a handful of .gov domains for some major cities in Democrat strongholds within key swing states: The attackers register their domains a few days in advance of the election, and then on Election Day send out emails signed by .gov from, say, miami.gov (also still available) informing residents that bombs…

That is such a complicate movie plot threat.

Far more direct to just spread those rumors through social media. Which more people pay attention to and believe than .gov. Or just make actual bomb threats.

Re: It's Way Too Easy to Get a .gov Domain Name

#169
post #17

> A review of the Top 10 most populous U.S. cities indicates only half of them have obtained .gov domains, including Chicago, Dallas, Phoenix, San Antonio, and San Diego. > Yes, you read that right: houston.gov, losangeles.gov, newyorkcity.gov, and philadelphia.gov are all still available. As is the .gov for San Jose, Calif., the economic, cultural and political center of Silicon Valley. A minor nit: Many of these ci…

> LA has .. lacity.org? That’s a bit unexpected.

It needs disambiguation because of Louisiana, while "Los Angeles" is more heavily in the collective conscious

Re: It's Way Too Easy to Get a .gov Domain Name

#170

Earlier quoted context omitted.

The Houston Chronicle reported today that the Texas GOP plans to purchase several domains resembling democratic candidates and run active disinformation campaigns against them using fake campaign sites[0]. Might’ve had something to do with it. 0: https://www.houstonchronicle.com/news/politics/texas/article...

Another news story today is the lawsuit against the "Devin Nunes' Cow/Mother" Twitter accounts run by anonymous DNC personnel. In each of these incidents the "disinformation" label is used by partisan officials and obsessively repeated by the media (because the creator's identity is not placed in large font at the top), but anyone who looks at it themselves can clearly see that such is satire and opposition material.…

"Devin Nunes' Cow" is obviously a satire account. As the judge ruled, a cow clearly can not tweet so nobody reasonably can believe that is actually his cow.

"ZweinerforTexas.com", "ZweinerforTx.com" are not obviously satire, they look like normal campaign urls and are clearly made to deceive.

Post reply on HN