Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Taking control of all .io domains with a targeted registration

thehackerblog.com

Post reply on HN
Print view View original

171–180 of 258 posts

Re: Taking control of all .io domains with a targeted registration

#171

Post by 3131s »

moo360 wrote: post #163
nimchimpsky wrote: post #160

Earlier quoted context omitted.

> That it is a distinction is important to me. Why ?

Are you being deliberately obtuse? It's a pretty important distinction that these were not some native tribesmen with millennia of ancestral history tied up in the lands.

100s of years though, so from the perspective of an individual on the island it's exactly the same -- their entire life was on that island. So, the distinction is pointless and reeks of apologetics IMO.

"Sir Bruce Greatbatch, KCVO, CMG, MBE, governor of the Seychelles, ordered all the dogs on Diego Garcia to be killed. More than 1000 pets were gassed with exhaust fumes. "They put the dogs in a furnace where the people worked", Lisette Talatte, in her 60s, told me, "and when their dogs were taken away in front of them our children screamed and cried". Sir Bruce had been given responsibility for what the US called "cleansing" and "sanitising" the islands; and the killing of the pets was taken by the islanders as a warning."

Re: Taking control of all .io domains with a targeted registration

#172

Post by stordoff »

walrus01 wrote: post #139
CydeWeys wrote: post #79

Earlier quoted context omitted.

We just used ai.google instead of google.ai as the canonical domain name for Google's AI initiative for precisely this reason. (We run .google and you can see the source code at https://nomulus.foo )

I just looked at the wikipedia page for the .ai ccTLD and registering something in Anguilla requires.... a fax machine? It's like time traveling to 1987.

If I'm reading https://whois.ai/cgi-bin/register.py? correctly, I'm not sure it's strictly required - it might just delay our account by a month (it's not 100% clear IMO):

> We will email you a password after which you need to login and pay the $100, unless you are resident in Anguilla.

> After this we will send you a letter, fax and short text message (SMS) with codes on them. Please, be sure your information is correct so you can receive verifiaction codes. When you get these you need to login and enter them.

> We will also wait 3 months to make sure there is no problem with your credit card. But each successfully verification will decrease this period by one month, so if you pass all of them you do not need to wait 3 month.

Shame it's so arcane/expensive ($100 for account, then $100/2 years per domain) - there's a couple of joke domains I might have picked up if they were cheap enough (gomennas.ai / ebihara.ai [character from Persona4]).

I do appreciate that the TLD alone resolves though: http://ai./

Re: Taking control of all .io domains with a targeted registration

#173

Post by sirn »

jontro wrote: post #110
sirn wrote: post #77

Earlier quoted context omitted.

I'm one of the unlucky few that were affected by this (I own .ch). One of my site user's reported that the website is inaccessible on Friday. I went to check and observed the DNS changing. Then went to check Route 53 status page[2] in which I learn that this is not specific to my site. The behavior is exactly the same as what is described in the SWITCH report[1]. Luckily that I have HSTS on my site, so the damage is…

We were also affected by this on a major e-commerce site. It was a .se domain. Their post mortem isn't really convincing ( https://news.gandi.net/en/2017/07/report-on-july-7-2017-inci... ) since they do not state what really happened and how it can be prevented again. I issued a support ticket to aws today to see what measures can be taken, otherwise we might need to change registrar.

I doubt changing the registra would change anything, as this seems more likely a problem on the TLD backend side than a problem on the registra itself, since it affect not only Gandi but also Route 53 Domain Registration. I'm under a serious consideration to switch from .ch to something else.

Re: Taking control of all .io domains with a targeted registration

#175

Post by peterburkimsher »

CydeWeys wrote: post #53
walrus01 wrote: post #13

This is a huge screwup on the part of the people who run the 'root' of .IO, and their entire operation should be severely scrutinized by ICANN. In my opinion almost all of the 'weird' TLDs which are country codes that are actually operated by a third party commercial service are 95% spam and junk registrations. .TV is a good example. Technical screwups aside, the existence of .IO and the fact that it "belongs" to the…

I'm in the TLD space (we run a fair number of gTLDs). If a gTLD operator screwed up like this then there could be consequences. A ccTLD, however, runs with very few restrictions. I don't see much of consequence happening to it as a result of this. I will, however, say that gTLDs are generally more secure and well-run than smaller ccTLDs, and are worth preferring for that reason. It's a weird historical quirk that .io…

> "It's a weird historical quirk that .io randomly became popular in the developer community"

The reason for me is totally clear: Github Pages gives me a free subdomain for http://pingtype.github.io but not .com.

I registered http://peterburk.github.com before that policy changed.

Re: Taking control of all .io domains with a targeted registration

#176

Post by rdtsc »

venning wrote: post #33
walrus01 wrote: post #13

This is a huge screwup on the part of the people who run the 'root' of .IO, and their entire operation should be severely scrutinized by ICANN. In my opinion almost all of the 'weird' TLDs which are country codes that are actually operated by a third party commercial service are 95% spam and junk registrations. .TV is a good example. Technical screwups aside, the existence of .IO and the fact that it "belongs" to the…

Just so no one is misled: "original inhabitants" does not mean "indigenous peoples" with respect to the BIOT. The islands were not populated prior to late-18th Century European colonization. The depopulation was of post-colonial people.

> Just so no one is misled: "original inhabitants" does not mean "indigenous peoples" with respect to the BIOT. ... The depopulation was of post-colonial people.

Oh that's fine then. They only lived there for what 100 years, totally fine to do these things to those 1000 some people:

https://en.wikipedia.org/wiki/Diego_Garcia

---

first tactics were implemented to decrease the population of Diego Garcia. Those who left the island - either for vacation or medical purposes - were not allowed to return, and those who stayed could obtain only restricted food and medical supplies. This tactic was in hope that those that stayed would leave "willingly".[26] One of the tactics used was that of the killings of Chagossian pets. Dogs were carried into sheds where they were gassed in front of their owners.[26]

---

Re: Taking control of all .io domains with a targeted registration

#177

Post by averagewall »

walrus01 wrote: post #13

This is a huge screwup on the part of the people who run the 'root' of .IO, and their entire operation should be severely scrutinized by ICANN. In my opinion almost all of the 'weird' TLDs which are country codes that are actually operated by a third party commercial service are 95% spam and junk registrations. .TV is a good example. Technical screwups aside, the existence of .IO and the fact that it "belongs" to the…

Just about every country has had some war with people removed or killed by an occupier. America, for instance.

Re: Taking control of all .io domains with a targeted registration

#178

Post by mindcrime »

stordoff wrote: post #172
walrus01 wrote: post #139

Earlier quoted context omitted.

I just looked at the wikipedia page for the .ai ccTLD and registering something in Anguilla requires.... a fax machine? It's like time traveling to 1987.

If I'm reading https://whois.ai/cgi-bin/register.py ? correctly, I'm not sure it's strictly required - it might just delay our account by a month (it's not 100% clear IMO): > We will email you a password after which you need to login and pay the $100, unless you are resident in Anguilla. > After this we will send you a letter, fax and short text message (SMS) with codes on them. Please, be sure your information is co…

FWIW, 101 Domains allows you to register a .ai domain (I registered zuse.ai there) and you don't have to do anything with a fax, etc. Now, maybe 101 has to fax something to somebody in Anguilla, but as the end user, you're isolated from that. Unless things have changed since I registered my domain.

Re: Taking control of all .io domains with a targeted registration

#179

Post by Mithorium »

CydeWeys wrote: post #79
james_pm wrote: post #76

Earlier quoted context omitted.

Like .ai, the new "hot" ccTLD.

We just used ai.google instead of google.ai as the canonical domain name for Google's AI initiative for precisely this reason. (We run .google and you can see the source code at https://nomulus.foo )

How about setting MX records for .google so you can have name@google emails

Re: Taking control of all .io domains with a targeted registration

#180

Post by alexdumitru »

andai wrote: post #125
runnr_az wrote: post #7

That's amazing! Nice find, man!

Trying to figure out why you were downvoted. Was it the positivity? The exclamation marks? The lack of pretending to contribute to the conversation?

It looks like it's been written by a spam bot.
Post reply on HN