Hacker Newsnew | past | comments | ask | show | jobs | submit | nickweb's commentslogin

I hate posting downdetector links, but when companies don't post actual outages on their status page this is all I can do.

I can only assume acknowledging a service being down may hurt them financially so the service monitors are manually changed.


Via nitter: https://xcancel.com/JustinGorya/status/2097287080128708930

Looks like the new model can be used if summoned via the API but the API won't list it.


I swear I put that at the start of the post. Must've managed to miss it when copy and pasting!

can't you edit it?

No. Posts are only editable for a small window of time.

Honestly. This with Paperless-NGX might be game changing if both pointed to the same folder.


That's cool. Yours comes up as stars (*). Must be a HN thing.


hunter2

doesnt look like stars to me


Microsoft's new spam filtering is affecting mail deliverability from a number of email service providers. MX Route is recommended here often enough that these issues may crop up for people here


I send a lot of email through Sendgrid. It's been blocking them as well.... live.com, outlook.com -- and everything is set up properly but they are still blocking a lot of legitimate email.


Hot Take: the proactive action of the registrar here is probably more beneficial than the number of false positives captured. If the registrar is aware that Google is hot on blocking potentially harmful sites, it's right that they take action expeditiously.

The bigger problem is the unbanning - for which there should be a better system, probably that should take the form of the registrar having a short grace period to aid in the Google stuff (DNS verification etc.) with additional checks by the registrar to make sure it's not being used for spam/malicious content.

The other point being why was Google banning you so quickly? This is the opaque part. Was the site reported? Was there some URL hijinks? That's the thing you'll probably never find out.


Relying on Google for this is actually not beneficial, as discussed here many times: https://hn.algolia.com/?q=Google+safe+browsing

If the registrar tracks this information, a possibly helpful course of action would be to notify or warn the domain owner that they are on the list.

In the modern adversarial web, I do not want a registrar that proactively disables my domain because of some third party report.


> The bigger problem is the unbanning

The was my first thought as well. Yes, using the Safe Browsing list feels wrong, but I don't know enough to speak definitively in that regards. However wouldn't a relatively simple solution be that if a registrar is choosing to use some third party's list of banned DNS entries that the registrar then also implement sufficient unblocked components that will allow people to be unbanned from that third party?

> Add a DNS TXT or a CNAME record.

I haven't had a use-case for a TXT record come up yet, but isn't it low risk enough to allow domain owners to continue to configure TXT records even if the registrar wants to ban configuring other record types? Then the person in the article could prove ownership and could then get off of the third party ban list that the registrar was utilizing.


DNS can be thought of as a distributed KV store with built in caching suitable for low write high read use cases, so TXT makes sense for that. e.g. basic feature flagging can be accomplished that way with basically no work to set it up assuming you were already using DNS.


The registry cannot ban individual record types. That is not how DNS works.

The registry only maintains a list of NameServers associated with the domain (and records for DNSSEC zone signing). Registries have nothing to do with regular records. They only record who defines those records.


There is _some amount_ of justification to ban TXT. There have been a few cases of C2 servers using DNS to send instructions to malware, so letting TXT slip through the cracks would still allow for that.

Now whether this downside justifies the massive problem it causes on false positives...


TXT can't be banned. There are several RFCs that require TXT records, such as DKIM configuration, DMARC configuration, and it is extensively used for verification by things like AWS SES, Microsoft Office, and all kinds of things. It's built into many standards and used by all kinds of other entities for all kinds of perfectly legitimate things.


Did you read my reply without reading the parent I was replying to? I’m talking about not allowing a blocked domain from being able to add new TXT entries as the parent was suggesting. Of course TXT shouldn’t be banned entirely…


yes, but in that cases we are on the "this (should) involve a criminal investigation" level not on a "Google Safe Search" doesn't trust you level


they didn't "just" take down the site, they took down the whole domain

Even google safe search isn't blocking you site per-se, it just adds a very annoying "this site is not safe" dialog you can "somehow" bypass (but most people wont and don't know how).

Like if this where the main site of a company (which it very much could be) this would also have taken down mail, all APIs, all Apps relying on such APIs.

so no this is absurdly unreasonable actions

that they seem to neither know nor care that this makes it impossible to "fix" false positives with google isn't helpful put this in the area of high levels of negligence which can get you into a lot of trouble in the EU


This popped up on my Watch Again part of YT. I figured it may have been a few years since folk seen it and a little but if humour is never s bad thing for a Monday morning.


Think you've inadvertently found a way to provide extra tests for mobile devices.

The Crime and Punishment one consistently crashes Brave mobile for me. I assume it's the length of the URL - and seen another commentator say the same for chrome mobile (sure they both use the same codebase so likely an upstream issue).


They didn't block it. The site owners have chosen to not show the site to UK users for Legal Reasons.


A bit like choosing to give up your wallet with a gun to your head

A ridiculous analogy but not entirely


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: