Hacker Newsnew | past | comments | ask | show | jobs | submit | more ghssds's commentslogin

> It's a privacy nightmare as well. Few people reason how much data they give away to a host of shady companies just by letting ads display.

Imagine all the data Cloudflare vacuums.


There is no non-violent bullying.


> they believe the majority of the other students are "on their side" and the victim is socially isolated.

And most of the time they are right.


IMHO a kid should choose the punishment over the psychological injury of not stand up to bullies. The toll is simply too high. I know because I chose the other option as a kid.


I've been down both paths. Both suck a lot. Especially when you don't have support at home.


why did google wanted it?


Google makes money off search, which requires that users want to visit websites. All websites using HTTP are not secure. Unsecure websites are uninteresting to most users, but most users don't have the know-how to distinguish what sites are using HTTPS and which aren't. So the simplest solution is to get all websits to switch to HTTPS before it becomes a problem


Another possibility is Google is in an industry that makes money by collecting information about users, and by supporting universal HTTPS, they gained a competitive advantage over ISPs and others regarding user data for Google searches and other services.


> The real domain of the Jacksonville Sheriff’s Office in Florida is jaxsheriff.org. We purchased jaxsheriff.us

This would not be an issue if RFC 1480 had been taken seriously.


Too many edge cases, some would still be exploitable. Eg if the real address was:

    Sheriff.CI.Jacksonville.FL.US
Malicious actors could register:

    Sheriff.Jacksonville.FL.US
Unless your solution is to add some verification step as part of .us registrations.


Can people register a subdomain of fl.us willy-nilly though? Isn't the root domain owned by the state?


From the RFC (note the "or businesses"):

   Name Space Within States:
   ------------------------

   "locality" - cities, counties, parishes, and townships.  Subdomains
   under the "locality" would be like CI.<city>.<state>.US,
   CO.<county>.<state>.US, or businesses. For example:
   Petville.Marvista.CA.US.

   "CI" - This branch is used for city government agencies and is a
   subdomain under the "locality" name (like Los Angeles). For example:
   Fire-Dept.CI.Los-Angeles.CA.US.
So you'd be counting on the sub-registrar of jacksonville.fl.us not to allow a registration for the fraudulent "business" of Sheriff, Inc. -- multiplied by every municipality across the country.


Many top-level TLDs have requirements you need to fulfill, .edu is a good example. Similarly you need to prove you're a local entity for many country-specific TLDs. At the end of the day though, this attack vector will always be there, no matter how diligent you are about it. Phishing is all about numbers and one in is often all you need.


Wouldn't make any difference, you'd just hack one email at any random sheriff department in the country. Or pay $5 for one, anyway.


People are animals.


When horses develop technology and create all sorts of jobs for themselves, this will be a good metaphor.


The average person doesn't develop technology or create jobs for themselves.



Sounds like something a goat lover would say..


The next mainstream will be made of the principles of the ones standing for their today.


>Who do you pay? How do you pay them?

Create a non-government copyright collective[0] that manage copyright unrelated to music (musicians already have their).

0: https://en.wikipedia.org/wiki/Copyright_collective


That's somewhat hilarious.

Last time I looked into trying to get pricing from ASCAP and BMI so I could legally stream some music for a small number of people, I found the following to be true:

1. There is no public pricing. (Why? Because fuck you, that's why!)

2. If I insisted, then the simplest way to get a price is to stream whatever I want and wait for a nasty letter from one or more lawyers that will most assuredly tell me how much I owe.

3. The only safe way to proceed is not to play the game at all.

That's gonna be a "no" on the cartels for me, boss. We might as well just throw all of the money and all of the copyrighted stuff into the memory hole for all the good they do.


See if the scheme that BMG / Columbia house still works. (Apparently they would send a check to the rightsholder, and if they cashed it, it was considered payment.)

(But don't quote me, I'm not an expert.)


Any project providing privacy or free speech to people.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: