Live data from Hacker News

We spent $20 to achieve RCE and accidentally became the admins of .mobi

labs.watchtowr.com

371–380 of 391 posts

Re: We spent $20 to achieve RCE and accidentally became the admins of .mobi

#371

Earlier quoted context omitted.

Wow. I’d save ~$0.52 (tax included) over my current plan with unlimited voice, and texts, and 5GB data…

Which provider do you use?

https://www.sim.de/ German provider

Re: We spent $20 to achieve RCE and accidentally became the admins of .mobi

#372
post #219

Earlier quoted context omitted.

This is the most obvious reason why Verisign is a monopolist and should be regulated like a utility. They make false claims about choice and not being locked in. You buy a domain, you use it, you're locked in forever. And they know it. That's why they fight tooth and nail to protect their monopoly.

It’s worse if you stop using the phrase ‘buy’ and instead use the term ‘rent’. A DNS provider could 10,000x your domain cost and there’s nothing you can do about it.

We can prevent this by paying the domain registrar ahead of time for N years. It's not a real solution, but it works (as good as any patch)

Re: We spent $20 to achieve RCE and accidentally became the admins of .mobi

#373

Earlier quoted context omitted.

I think that costs $20.

Yes, as a one-time charge. Though AFAIK there's no law or contract term preventing Google from starting to charge a monthly fee in the future. And after some time — for me it was 5+ years, porting from a baby Bell land line to a postpaid T-Mobile family plan for a couple years and then to Google Voice — your number will be tarred and feathered as a "VoIP" number and rejected for identity verification by some parties…

> your number will be tarred and feathered as a "VoIP" number and rejected for identity verification by some parties until it's ported back to a paid service (again, after some time).

Where things get fun is when Google Voice IS your paid service (e.g. google fiber's phone service, popular with a certain demographic that used POTS for most their life and want to continue having a similarly behaving service).

Re: We spent $20 to achieve RCE and accidentally became the admins of .mobi

#374
post #349

Earlier quoted context omitted.

Not regulated? They're portable because they're regulated.

Lose access to your number by any category of errors on your part or your carrier's part, and see what happens. They're not tied to your person with much more permanency than a DHCP IP address. There's no process to verify your identity or recover your number or help you regain your accounts. The actual process for migrating your number is "Sign up with this other brand you've never tried before and tell them to poli…

Google allows you to set up multiple types of second factors for 2FA purposes. There's no reason you should be relying solely on SMS for gmail's 2FA.

Re: We spent $20 to achieve RCE and accidentally became the admins of .mobi

#375
post #349

Earlier quoted context omitted.

Lose access to your number by any category of errors on your part or your carrier's part, and see what happens. They're not tied to your person with much more permanency than a DHCP IP address. There's no process to verify your identity or recover your number or help you regain your accounts. The actual process for migrating your number is "Sign up with this other brand you've never tried before and tell them to poli…

Google allows you to set up multiple types of second factors for 2FA purposes. There's no reason you should be relying solely on SMS for gmail's 2FA.

What about any other service that only allows sms 2fa?

Re: We spent $20 to achieve RCE and accidentally became the admins of .mobi

#376

Earlier quoted context omitted.

Phone number portability is required by law in the US since 2003. See 47 U.S.C. § 251(b)(2) https://www.fcc.gov/general/wireless-local-number-portabilit...

What if you need to stop paying for a phone bill entirely though? Maybe you're living paycheck to paycheck and money is just too tight this month. That's what I think GP was talking about. Is it possible to "park" your phone number until you can start a new plan?

Do pre-paid plans not exist in the US?

Re: We spent $20 to achieve RCE and accidentally became the admins of .mobi

#377
post #219

Earlier quoted context omitted.

This is the most obvious reason why Verisign is a monopolist and should be regulated like a utility. They make false claims about choice and not being locked in. You buy a domain, you use it, you're locked in forever. And they know it. That's why they fight tooth and nail to protect their monopoly.

It’s worse if you stop using the phrase ‘buy’ and instead use the term ‘rent’. A DNS provider could 10,000x your domain cost and there’s nothing you can do about it.

This actually happened to me, but fortunately I never actually used the domain. I registered tweed.dev intending to use robert.tweed.dev as a personal blog. It wasn't classed as a "premium" domain and the first year was £5 or something IIRC, which was half price compared to the normal renewal fee.

The next year they decided it was premium after all, and wanted to charge £492,000 for renewal. I still have a screenshot of that, although needless to say I don't own the domain anymore.

Re: We spent $20 to achieve RCE and accidentally became the admins of .mobi

#378

Earlier quoted context omitted.

This is why PHP is mostly banned at bigCo

Pretty much. PHP for a banking software? For anything money related? Goomg to have a bad time.

Have you ever heard of WooCommerce? It’s the market leader. It powers more stores than Shopify.

Re: We spent $20 to achieve RCE and accidentally became the admins of .mobi

#379
post #158

I think the whole computer approach is doomed to failure. It relies on perfect security that is supposed to be achieved by SBOM checking and frequent updates. That is never going to work. Even log4j, 40% of all downloads are vulnerable versions. Much less when a vendor in a chain goes out of business or stops maintaining a component. Everything is always going to be buggy and full of holes, just like our body is alwa…

nah, slowly but surely we can write good and reliable code, use that for things to make better tools, and then use those to ... :)

It will be probably a few decades, but the road seems pretty clear. Put in the work, apply the knowledge gained from all the "lessons learned" and don't stop.

Re: We spent $20 to achieve RCE and accidentally became the admins of .mobi

#380

Earlier quoted context omitted.

Which provider do you use?

https://www.sim.de/ German provider

If I compared it to the service provider in Guinea, I can also say that you are overpaying way too much.
Post reply on HN