News for hackers. Stuff that matters.
Re:I bought netflix.soy by saagarjha on Monday May 25, 2020 @04:52PM (#23304842)
Interestingly, I recently saw a couple a couple of google.* domains available on Google Domains, including some reasonable-sounding ones: IIRC, google.tech (edit: google.page), google.business, and google.camp. Tried to purchase them but they instantly became unavailable the moment I tried to do so. The cynic in me thinks that Google has a special check for those and renews it themselves if someone tries…

More generally, however: all these TLDs are kind of stupid, and trying to make sure you own every single TLD for your business is similar to a protection racket where you have to pay just so something bad doesn't happen to you. Perhaps we should stop trying to make a billion of them.

Re:I bought netflix.soy by xeeeeeeeeeeenu on Monday May 25, 2020 @04:58PM (#23304908)
>Interestingly, I recently saw a couple a couple of google.* domains available on Google Domains, including some reasonable-sounding ones: IIRC, google.tech, google.business, and google.camp. Tried to purchase them but they instantly became unavailable the moment I tried to do so. The cynic in me thinks that Google has a special check for those and renews it themselves if someone tries…

It must have been a bug in Google Domains, all three domains were registered ~5 years ago.

Re:I bought netflix.soy by CydeWeys on Monday May 25, 2020 @05:19PM (#23305108)
It could have been an interruption in connectivity with the registry operator(s) for those TLDs. When that happens, most registrars will at least attempt to buy domains they're currently unable to retrieve the status of. You only get charged if the domain actually ends up being created.
Re:I bought netflix.soy by BlueGh0st on Monday May 25, 2020 @10:00PM (#23306761)
I have experienced this bug in Google Domains before (for non Google related domain names). Interestingly, it seems to particularly affect domains that are registered but unused.

This isn't isolated to Google Domains, however. GoDaddy's website let me go through the entire checkout process with 2 or 3 registered domain names, followed by a refund an hour later.

Re:I bought netflix.soy by saagarjha on Monday May 25, 2020 @04:59PM (#23304923)
Yes, but I figured they might have lapsed. I idly check it from time to time and they certainly didn't show up as available previously.
Re:I bought netflix.soy by kirubakaran on Monday May 25, 2020 @04:56PM (#23304894)
> they instantly became unavailable the moment I tried to do so. The cynic in me thinks that Google has a special check for those and renews it themselves if someone tries

My guess is that they were never available and there are doing a poor job of figuring out which domains are taken and which are not. I've been this in several other domain name search sites too, especially if there is no nameserver for a registered domain.

Re:I bought netflix.soy by three_seagrass on Monday May 25, 2020 @08:41PM (#23306342)
Which is most likely because registries are known for having poor infrastructure. If registrars can't see the name is taken from the registry, they will default to available.

I worked on some registrar-related stuff years ago now and even at that time, Verisign was known for having poor support of providing information about .com registrations.

Re:I bought netflix.soy by SV_BubbleTime on Monday May 25, 2020 @11:07PM (#23307052)
> Which is most likely because registries are known for having poor infrastructure.

If people only knew that the internet was held together with bubblegum and duct tape...

Every fundamental layer has just crazy / old legacy foundations that are just incompatible with safe systems. Really opened my eyes when I saw how telco routing worked at the lowest levels.

Re:I bought netflix.soy by saagarjha on Monday May 25, 2020 @05:01PM (#23304944)
Clicking "purchase" on them must have kicked the system into fixing itself, then, because they stopped showing up as such after I did so.
Re:I bought netflix.soy by kirubakaran on Monday May 25, 2020 @05:03PM (#23304959)
I think so too, because that's when they do the (presumably resource intensive) call to actually attempt the registration and they can update their "most likely available" list with this definitive data.
Re:I bought netflix.soy by dheera on Monday May 25, 2020 @04:56PM (#23304886)
Even better yet, it would be interesting if we just abandoned TLDs. There is no reason why http://google/ can't work, really, with a bunch of infrastructure changes.
Re:I bought netflix.soy by tylerhou on Monday May 25, 2020 @05:20PM (#23305112)
Infrastructure changes aren't even needed; Google already owns the .google TLD. All they would need to do is attach an A record to the root.
Re:I bought netflix.soy by three_seagrass on Monday May 25, 2020 @08:44PM (#23306354)
Sure, but why would they?

Can you imagine all the search advertising Google would lose if they allowed just 'nike' and 'att' to resolve the websites in Chrome, rather than search results?

Re:I bought netflix.soy by runawaybottle on Monday May 25, 2020 @11:21PM (#23307104)
Did we just find the secret to beating google?
Re:I bought netflix.soy by CydeWeys on Monday May 25, 2020 @05:56PM (#23305368)
ICANN doesn't allow A records on the DNS root on gTLDs. If they did, we already would've.
Re:I bought netflix.soy by computerfriend on Tuesday May 26, 2020 @01:00AM (#23307574)
This explains so much. I'd always wondered why e.g. CERN's website was served from home.cern instead of just cern.
Re:I bought netflix.soy by moonchild on Monday May 25, 2020 @06:15PM (#23305513)
http://cm./ used to resolve
Re:I bought netflix.soy by Macha on Monday May 25, 2020 @06:50PM (#23305723)
https://news.ycombinator.com/item?id=974111

http://to./ used to be a URL shortener.

Either the rules on ccTLDs are different, or it's a recentish crackdown.

Re:I bought netflix.soy by sleevi on Monday May 25, 2020 @07:20PM (#23305912)
There are no rules for ccTLDs, which their countries like to claim as sovereign property (see https://meetings.icann.org/en/dublin54/schedule/wed-ccnso-me... and https://gac.icann.org/principles-and-guidelines/public/princ... for some of the views)

Some ccTLDS voluntarily agree to abide by the same rules and operational requirements as the gTLDs - https://www.icann.org/resources/pages/cctld-2012-02-25-en has more details.

This means, for example, than ccTLDs aren’t bound by the findings from SAC053 at https://www.icann.org/en/system/files/files/sac-053-en.pdf which have been included in the gTLD contracts.

Re:I bought netflix.soy by vpzom on Monday May 25, 2020 @07:48PM (#23306072)
Wow, that's a glimpse into the past
Re:I bought netflix.soy by CydeWeys on Monday May 25, 2020 @07:11PM (#23305850)
.cm is a ccTLD, not a gTLD. All two-letter TLDs are ccTLDs and all 3+ letter TLDs are gTLDs. Countries have wide latitude to do whatever they want with their ccTLDs.
Re:I bought netflix.soy by odensc on Monday May 25, 2020 @09:11PM (#23306492)
http://ai./ still works
Re:I bought netflix.soy by hnick on Tuesday May 26, 2020 @02:16AM (#23307979)
What happens if I have a computer on my network named ai? Wouldn't it cause a conflict?

I called my FreeNAS box freenas because I didn't feel very creative, and I can browse to it as http://freenas or http://freenas./ but if they took a domain of 'freenas' suddenly that means I have to do extra work and rename my stuff. Doesn't seem fair!

Re:I bought netflix.soy by jtvjan on Tuesday May 26, 2020 @05:55AM (#23309090)
You should have used a reserved TLD like `.local'. If you set it as the local domain name `ai' and `ai.local' would work. `ai.' would not work, as the dot at the end tells it to look at the top level. (like the slash at the beginning of an absolute path)
Re:I bought netflix.soy by hnick on Tuesday May 26, 2020 @06:33AM (#23309343)
Ah yes I forgot that, .local does work so I guess that fixes that problem.
Re:I bought netflix.soy by captn3m0 on Monday May 25, 2020 @05:49PM (#23305328)
The used to have an A record on some of the other TLDs they own.

I maintain a list at captnemo.in/tld-a-record

Re:I bought netflix.soy by CydeWeys on Monday May 25, 2020 @07:14PM (#23305869)
Do you remember the details?
Re:I bought netflix.soy by captn3m0 on Wednesday May 27, 2020 @05:18AM (#23321052)
Yes, I did a blog post when it happened: https://captnemo.in/blog/2018/06/02/google-tld-no-more-a-rec....

Google was pointing its TLDs to 127.0.0.53, and once they started using the TLDs actively, they removed the records.

Re:I bought netflix.soy by ngold on Monday May 25, 2020 @04:58PM (#23304907)
With the super shady sale of .org it may be time to consider who these people are selling essentially nothing.
Re:I bought netflix.soy by ramzis on Tuesday May 26, 2020 @06:10AM (#23309188)
I was pondering about the idea of a browser extension for a sort of local DNS. Paying for domains could be ditched if everyone had a local copy of a database that mapped any character sequence (even emojis) to a server address that would get filled in by the extension in the url bar. Not sure if it would extend to mobile or all websites, but could work similar to a social network in the sense that you need to get the extension (i.e. access) first, and then you can find someone just by using a string that they've provided. Combined with something like Github pages it would offer a full free solution.
Re:I bought netflix.soy by pastage on Saturday June 06, 2020 @06:25AM (#23438154)
Seems like the hosts files of old and one kind of Alternative root. https://en.m.wikipedia.org/wiki/Alternative_DNS_root
Re:I bought netflix.soy by p4bl0 on Monday May 25, 2020 @05:01PM (#23304946)
I remember seeing a NIC that did this with their TLD. But I can't remember which one :/. I would love if someone finds it.
Re:I bought netflix.soy by adamtulinius on Monday May 25, 2020 @05:15PM (#23305061)
I think it's pretty common. Our national NIC does it: http://dk redirects to their website.
Re:I bought netflix.soy by snowl on Monday May 25, 2020 @11:14PM (#23307074)
Surprisingly, going to http://dk redirects to https://www.penguin.com.au/browse/dk for me. How strange (I've never visited the penguin website before this).
Re:I bought netflix.soy by nerdponx on Monday May 25, 2020 @08:08PM (#23306185)
This redirected to https://dk.com for me. Is this my ISP's DNS messing with me?
Re:I bought netflix.soy by jedieaston on Monday May 25, 2020 @08:41PM (#23306341)
Firefox will sometimes append .com onto the URL.
Re:I bought netflix.soy by nerdponx on Wednesday May 27, 2020 @12:11PM (#23325436)
What a nasty non-feature. Can this be disabled?
Re:I bought netflix.soy by sumedh on Monday May 25, 2020 @07:36PM (#23306006)
Does not load for me

"dk’s server IP address could not be found."

Re:I bought netflix.soy by citrusui on Monday May 25, 2020 @08:14PM (#23306212)
Another one is http://ai

Perhaps that will work.

Re:I bought netflix.soy by jdminhbg on Monday May 25, 2020 @08:27PM (#23306280)
This works if you add the trailing .: http://ai.
Re:I bought netflix.soy by hoppla on Monday May 25, 2020 @04:58PM (#23304911)
DNS suffix, to name one.
Re:I bought netflix.soy by JMTQp8lwXL on Monday May 25, 2020 @05:23PM (#23305129)
Companies like Mark Monitor will buy all of the <yourbrand>.tld's for you-- and continually grab new ones (as the set of TLDs is constantly growing). At Netflix's size, I would assume they would've paid for such a service.
Re:I bought netflix.soy by toast0 on Monday May 25, 2020 @06:07PM (#23305448)
It's worth noting that MarkMonitor ownership has changed in recent years.

Regardless, they certainly can register all the names for you, if that's what you ask them to do, but at some point, there's an awful lot of names, and it feels extortiony to pay for them all. I was working for a MarkMonitor client when the 'landrush' for all these new tlds was happening, and we'd get frequent emails about which tlds were going live soon, so we could decide if we wanted foo.bike or foo.sexy or foo.personals, or whatever. And then, if we wanted to pay rediculous prices to get it early, or wait and see if we could get it at normal price (+ hefty MarkMonitor markup). We would almost certainly win a UDRP, but that's expensive too.

Then we got bought, and the new corporate overlords liked throwing money away on dumb domains, so foo.bike got registered by their team (and they had an actual domain team, so I got to shed that hat).

Re:I bought netflix.soy by mprev on Tuesday May 26, 2020 @05:10AM (#23308861)
When you mention the change of ownership, I assume that there's an implication there, but would you be willing to be explicit about it?
Re:I bought netflix.soy by toast0 on Tuesday May 26, 2020 @11:43AM (#23312541)
They're owned by a VC firm now, which I suspect means they'll need to change how they operate in order to show growth. That's not what I would want in a registrar I'm counting on for absolute stability of domain names for my hypothetical big/important company.
Re:I bought netflix.soy by lifeformed on Monday May 25, 2020 @06:25PM (#23305570)
Could someone register a tld and charge a crazy amount of money for it, to extort big companies?
Re:I bought netflix.soy by CydeWeys on Monday May 25, 2020 @07:44PM (#23306041)
Yes. Look up the history of .sucks
Re:I bought netflix.soy by saagarjha on Monday May 25, 2020 @08:25PM (#23306268)
The first reason https://get.sucks mentions why you might want one of their domains is to protect your brand online.
Re:I bought netflix.soy by mschuster91 on Tuesday May 26, 2020 @07:50AM (#23309928)
"protect" aka good old mafia-style "protection money" rackets.
Re:I bought netflix.soy by gnopgnip on Monday May 25, 2020 @06:38PM (#23305660)
No, they can use their trademark to take control of the domain without paying any money through UDRP.
Re:I bought netflix.soy by hedora on Monday May 25, 2020 @09:28PM (#23306588)
That’s not how trademark law works, at least. Does the URDP really let trademark holders take down sites that are critical of them?
Re:I bought netflix.soy by toast0 on Tuesday May 26, 2020 @05:17PM (#23316514)
I wouldn't expect UDRP to allow a trademark holder to take down a site critical of the holder; I that's a legitimate use of the trademark, even if it's not approved or desired.

However, that's not really what most companies are worried about, they're worried about phishing or scams or misleading sites with their name; UDRP should allow those to be taken down fairly easily, although the question is always if it's less expensive to register the domain or to leave it unregistered and dispute it if it's misused.

Re:I bought netflix.soy by mike_d on Tuesday May 26, 2020 @02:27AM (#23308035)
Yes, a company by the name of Donuts did this with over 200 new TLDs.
Re:I bought netflix.soy by zebraflask on Monday May 25, 2020 @08:08PM (#23306190)
There are now anti-domain squatting laws on the books, aside from more conventional trademark, etc., protections.

If any of the big names found someone using a clone domain and objected to it, the domain owner - I'd expect - would find themselves having a chat with keenly interested IP attorneys.

Re:I bought netflix.soy by bald on Monday May 25, 2020 @05:06PM (#23304994)
there is the Trademark Clearinghouse which actually deals with these cases (by either automatically registering the domain for the trademark holder, or notifying them immediately if the domain is registered so they can take semi-automated action) [1]

[1] https://newgtlds.icann.org/en/about/trademark-clearinghouse

Re:I bought netflix.soy by blincoln on Monday May 25, 2020 @05:33PM (#23305209)
Yeah, I don't recommend buying domains with trademarks in them, even for research (or similar) purposes.

I registered a domain name with a client's trademarked name in it as part of an authorized penetration test of that client a few years ago. At the end of the test, I asked if they wanted me to transfer it to them, and they didn't. A year later, when it expired and the domain privacy stuff went away, all of that automated enforcement machinery started running, and suddenly I was being threatened with all sorts of arbitration/court appearances if I didn't transfer the domain (which I no longer owned) to them. Took weeks to sort out, and that was with documentation that I'd bought the domain as part of a pen test the client had specifically agreed to.

Re:I bought netflix.soy by rakoo on Tuesday May 26, 2020 @05:31AM (#23308966)
I felt the same when I wanted to pick my domain name: you're tempted to go for the traditional way of going with YourName, and then buy the .com or .org but what if you buy only one of them ? How does someone else know that YourName.io isn't your website if you don't buy it ?

My conclusion was that your domain name must not be in the form of YourName.tld; the tld must be part of your name. You can either use puns like buying yourna.me, but it's a bit weird for non-tech people, or you have to use the weirdness of tlds and go for something like lostin.space. There is less confusion at "what comes after" because there is only one.

Re:I bought netflix.soy by pmachinery on Monday May 25, 2020 @05:05PM (#23304978)
There is no way you'd get a "google" domain under any extension but even if you register a domain with "google" + something else you're going to lose it in a UDRP anyway.

It's possible that google and other major brand names don't have to register every extension, the names are just reserved for them alone, should they want them.

Re:I bought netflix.soy by saagarjha on Monday May 25, 2020 @05:07PM (#23305001)
There was a dude a while back who registered google.com and gave it back when asked. I figured I might be able to do that and get a cool story to tell out of it.
Re:I bought netflix.soy by CydeWeys on Monday May 25, 2020 @05:17PM (#23305083)
He never registered google.com. google.com is hard-locked at the registry level by Verisign and has very high security manual safeguards around any changes that are made to it.

There was a temporary bug in Google Domains that made it appear as if he had bought google.com, but he had not.

Re:I bought netflix.soy by JMTQp8lwXL on Monday May 25, 2020 @05:20PM (#23305117)
Are there other domains hard-locked at the registry level? I haven't heard of this behavior before.
Re:I bought netflix.soy by CydeWeys on Monday May 25, 2020 @05:26PM (#23305156)
Yes, there are many such registry-locked domains. Verisign and most other TLD operators sell it as a service. More info:

https://www.verisign.com/en_US/channel-resources/domain-regi... https://krebsonsecurity.com/2020/01/does-your-domain-have-a-...

It's a recommended best-practice for high-value sites, which the main website of any Fortune 500 company certainly falls under.

Re:I bought netflix.soy by JMTQp8lwXL on Monday May 25, 2020 @05:29PM (#23305174)
Oh, this is available to anyone with a .com using a major registrar. I had misunderstood this to be some special feature only available to the domains that make up massive amounts of internet traffic like google.com.
Re:I bought netflix.soy by CydeWeys on Monday May 25, 2020 @05:32PM (#23305201)
There is likely to be even more scrutiny placed on any changes to domain names that employees of Verisign immediately recognize, such as "google.com". I imagine that would have to go through a very high level person at Verisign. It's in everyone's vested best interests here to not screw up something so visible as that.
Re:I bought netflix.soy by thekyle on Monday May 25, 2020 @09:45PM (#23306685)
I think it was GoDaddy not Google Domains.
Re:I bought netflix.soy by CydeWeys on Tuesday May 26, 2020 @08:37AM (#23310328)
It was Google Domains.
Re:I bought netflix.soy by chinathrow on Monday May 25, 2020 @05:14PM (#23305050)
Huh?

The guy in the article did in fact buy a google.tld - https://google.xn--9dbq2a/

Re:I bought netflix.soy by pmachinery on Monday May 25, 2020 @05:37PM (#23305242)
I wasn't talking to the guy in the article, was I?
Re:I bought netflix.soy by gbear605 on Monday May 25, 2020 @09:09PM (#23306481)
The guy in the article was able to do it recently. Why not the person you were replying to? (Besides the fact that now the guy in the article has done them all)
Re:I bought netflix.soy by pmachinery on Tuesday May 26, 2020 @03:08AM (#23308240)
Lots of people hand registered 3 and 4 letter .coms in the past.

So because they could do it, anyone who points out it's not possible now should be downvoted and asked to explain themselves with:

Why is it not possible, beside the fact that it's not possible?

[Edited to remove excess frustration/annoyance/snark at people quibbling so much about a totally inconsequential and factual remark.]

Re:I bought netflix.soy by joyj2nd on Monday May 25, 2020 @06:57PM (#23305763)
It is unlikely that google owns trademarks in all countries for all trademark types.
Re:I bought netflix.soy by biggestdecision on Monday May 25, 2020 @08:21PM (#23306253)
Lot's of domain squatters listen out for whois requests, to try nab unregistered domains before the real interested buyer.

Wouldn't surprise me if big tech like Google does the same.