Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Hijacking Trust? Bitvise Under Fire for Controlling Domain of FOSS Project PuTTY

blog.pupred.com

Post reply on HN
Print view View original

71–79 of 79 posts

Re: Hijacking Trust? Bitvise Under Fire for Controlling Domain of FOSS Project PuTTY

#71

Post by zylent »

112233 wrote: post #45
mrweasel wrote: post #32

Earlier quoted context omitted.

I hope you do, that would be pretty funny. Like using PowerShell as your shell on Linux.

I'll bite. What is your preferred way to use serial port console on linux? Kermit? I am really no fan of minicom... Also, I'd take pterm over modern gpu electron nodejs turtle tower terminals. It has sane requirements and perfomance, behaves in a consistent, predictable manner and handles large scrollback very well. Why bad?

If you're using serial heavily, https://www.vandyke.com/products/securecrt/

Re: Hijacking Trust? Bitvise Under Fire for Controlling Domain of FOSS Project PuTTY

#72

Post by TRiG_Ireland »

advisedwang wrote: post #68
TRiG_Ireland wrote: post #63

Has the putty.org website changed in the few hours since this was posted? I see nothing there about any kind of software at all. It appears to be about someone called Mike Yeadon, and scandals in the pharmaceutical industry. That's not what anyone else here is describing.

On the wayback machine it does appear that putty.org recently changed. If you go to www.putty.org you can see the page everyone is talking about still present.

How odd. Having different content on the main domain and the www subdomain is so unusual that it's hard to believe it was done on purpose.

Re: Hijacking Trust? Bitvise Under Fire for Controlling Domain of FOSS Project PuTTY

#73

Post by const_cast »

peanut-walrus wrote: post #46
ColinWright wrote: post #22

Earlier quoted context omitted.

Point of information. From that doc: A.9.3 Would you like me to register you a nicer domain name? No, thank you. Even if you can find one (most of them seem to have been registered already, by people who didn't ask whether we actually wanted it before they applied), we're happy with the PuTTY web site being exactly where it is. It's not hard to find (just type ‘putty’ into google.com and we're the first link returned…

Huh weird, usually top 3 results are "sponsored" links serving malware.

Really? You're telling me you weren't looking for softwaredownload.com free download software today?

Re: Hijacking Trust? Bitvise Under Fire for Controlling Domain of FOSS Project PuTTY

#74

Post by const_cast »

msgodel wrote: post #15
SpaceNugget wrote: post #14

Earlier quoted context omitted.

It's a company who bought the domain of the exact name of the largest open source project that they directly compete with and then advertise themselves on it? This is at the very least unethical. You can't just use a competitors exact name to run a website that tries to snipe users looking for your competitor and call it a "fan site". The comments on this submission are pretty strange. What are the chances that a bun…

You can buy domain names with competitors names in them. People do this all the time. If you don't want people doing that you need to register the names yourself.

No, no you can't. I don't know where this misconception comes from.

Trademarks are trademarks, regardless of technology. I can't open a store called McDonald's that isn't a McDonald's but I sell cheeseburgers. Simply... moving this online doesn't magically make laws disappear.

Tech people have a strange misconception that tech overrides laws. No, it doesn't. Calling it "disruption" doesn't count, either.

If bought googlesearch.org but it's my own search engine that's illegal. You can't do that. Even if I did g00glesearch.org that's still illegal.

Even if I don't use the Google name, but I use something similar, maybe with a similar font, that's still illegal. Because, obviously, the intent is to deceive consumers. You can't do that. You can't pretend to be a brand you're not.

Re: Hijacking Trust? Bitvise Under Fire for Controlling Domain of FOSS Project PuTTY

#75

Post by whywhywhywhy »

em-bee wrote: post #44
whywhywhywhy wrote: post #38

Earlier quoted context omitted.

Yes, all the ones actually worth owning are only a few dollars if you have a unique project name, you don't need "every possible domain" you just need one that looks legit. Unfortunately this is the world we live in where if you don't then someone else will and they'll abuse it so you have to act defensively. Either you put the time into the project and care about it in which case you should spend the few dollars a y…

there are to many top level domains that look legitimate: https://putty.app https://putty.at https://putty.click https://putty.cloud https://putty.codes https://putty.co.uk https://putty.com https://putty.computer https://putty.dev https://putty.digital https://putty.domains https://putty.engineer https://putty.host https://putty.hosting https://putty.info https://putty.io https://putty.media https://putty.net https:…

> https://putty.com, https://putty.org, https://putty.app

These three are the only legit looking one in that list, it's absurd to pretend things like https://putty.solutions, https://putty.at, https://putty.click, https://putty.codes, etc are even in the running when they actively look like scams.

You only need one legit looking domain because if it's legit and a domain it will be top of the search anyway.

Re: Hijacking Trust? Bitvise Under Fire for Controlling Domain of FOSS Project PuTTY

#76

Post by asimops »

mtlynch wrote: post #56
asimops wrote: post #49

Earlier quoted context omitted.

Well, classic sender receiver mismatch I guess :D Is my intent more clear with that second try to explain? If not, I'm more then welcome to talk about a better way to phrase it :)

I was confused as well and panicked that I'd been installing KeePass from a fake site all these years. But keepass.info is indeed the official site. Suggest: That is the same attitude as critics telling the Keepass maintainer to migrate the (official) keepass.info domain to a .com...

Yes, that captures my intent :) Sadly, I cannot edit the post anymore.

Re: Hijacking Trust? Bitvise Under Fire for Controlling Domain of FOSS Project PuTTY

#77

Post by mschuster91 »

ozgrakkurt wrote: post #61
signal11 wrote: post #58

Earlier quoted context omitted.

How do we report disappointing search results to Google? (Does anyone know please?)

They don’t care if results are disappointing for you, they just want you to click more ads

... and when the results are junk, you go back to Google and so the KPI "time spent on Google" rises.

That's the problem when the metrics are focused on how the company is doing and not how the user is doing, but when there is barely any competition that is not dogshit you don't have to care about how the customer feels because they can't go anywhere anyway so you can feel free to extract the maximum profit from them.

That's also why Google, Facebook, Microsoft and OpenAI are all so hellbent on AI: they all want to be the one and only place that you interact with to get answers to your questions so that as much of your "eyeball time" as possible (and with it, ad income) stays in their respective walled gardens.

Re: Hijacking Trust? Bitvise Under Fire for Controlling Domain of FOSS Project PuTTY

#78

Post by thunderfork »

msgodel wrote: post #19
ColinWright wrote: post #18

Earlier quoted context omitted.

So someone who has written something and made it available for the common good, and makes no money from it, should now go and buy every possible domain that people might use in a deceptive manner. This is a great example of what drives people away from providing anything for free.

It's a namespace problem. You can't just ban people from registering anything that might be confusing like that. If we followed your idea the internet wouldn't work. EDIT: They're not deceiving users though? The first section on the index page links directly to the real putty site. They're very clear about all of it. EDIT2: Nope. We really don't want DNS "moderators." All of us have seen what happens with forum moder…

[dead]

Re: Hijacking Trust? Bitvise Under Fire for Controlling Domain of FOSS Project PuTTY

#79

Post by beefnugs »

ozgrakkurt wrote: post #61
signal11 wrote: post #58

Earlier quoted context omitted.

How do we report disappointing search results to Google? (Does anyone know please?)

They don’t care if results are disappointing for you, they just want you to click more ads

haha i swear for a super brief period of time they actually did have a little link if you ever travelled back to search results where you could feedback or filter the dumb sites... then someone was forced to re-read the company mandate and had to sign HR paperwork that now only evil
Post reply on HN