271–280 of 391 posts
Earlier quoted context omitted.
Not regulated? They're portable because they're regulated.
I'd assume regulated in the sense of identity verification and transactions. There's no legal basis for needing a north American phone number, but good luck with any US obligations if you are without one.
Unlike in Germany, where you can’t get one without a passport or ID card.
Obviously there are a lot of errors by a lot of people that led to this, but here's one that would've prevented this specific exploit: > As part of our research, we discovered that a few years ago the WHOIS server for the .MOBI TLD migrated from whois.dotmobiregistry.net to whois.nic.mobi – and the dotmobiregistry.net domain had been left to expire seemingly in December 2023. Never ever ever ever let a domain expire.…
This is the most obvious reason why Verisign is a monopolist and should be regulated like a utility. They make false claims about choice and not being locked in. You buy a domain, you use it, you're locked in forever. And they know it. That's why they fight tooth and nail to protect their monopoly.
Earlier quoted context omitted.
Phone number portability is required by law in the US since 2003. See 47 U.S.C. § 251(b)(2) https://www.fcc.gov/general/wireless-local-number-portabilit...
What if you need to stop paying for a phone bill entirely though? Maybe you're living paycheck to paycheck and money is just too tight this month. That's what I think GP was talking about. Is it possible to "park" your phone number until you can start a new plan?
Earlier quoted context omitted.
What if you need to stop paying for a phone bill entirely though? Maybe you're living paycheck to paycheck and money is just too tight this month. That's what I think GP was talking about. Is it possible to "park" your phone number until you can start a new plan?
Yes, port it to Google voice.
Earlier quoted context omitted.
interesting, why is this?
I've read - because if a user uploads content that gets you on a list that blocks your domain - you could technically switch user content domains for your hosting after purging the bad content. If it's hosted under your primary domain, your primary domain is still going to be on that blocked list. Example I have is - I have a domain that allows users to upload images. Some people abuse that. If google delists that do…
What? No.
Earlier quoted context omitted.
And thanks to the magic of "shoving strings from the Internet into a command line", poof, RCE! It bit GitLab twice
What incident are you referring to?
Anyway, turns out that shelling out to an external binary fed with bytes from the Internet is good fun
Earlier quoted context omitted.
Wouldn't usercontent.github.com work just as well?
I think one reason is that a subdomain of github.com (like username.github.com) might be able to read and set cookies that are shared with the main github.com domain. There are ways to control this but using a different domain (github.io is the one I'm familiar with) creates wider separation and probably helps reduce mistakes. I read about this a while back but I can't find the link anymore (and it's not the same one…
Imagine if eg.com allowed user subdomains, and some users added logins to their subdomains for whatever reason, there's a potential for an adversarial user to have a subdomain and just record all logins attempted, because browsers will automagically autofill into any subdomain.
if you need proof i can take a screenshot, it's ridiculous, and i blame google - it used to be the standard way of having users on your service, and then php and apache rewrite style usage made example.com/user1 more common than user1.example.com.
Earlier quoted context omitted.
This is the most obvious reason why Verisign is a monopolist and should be regulated like a utility. They make false claims about choice and not being locked in. You buy a domain, you use it, you're locked in forever. And they know it. That's why they fight tooth and nail to protect their monopoly.
It’s worse if you stop using the phrase ‘buy’ and instead use the term ‘rent’. A DNS provider could 10,000x your domain cost and there’s nothing you can do about it.