News for hackers. Stuff that matters.
Re:That time Verisign typo-squatted all of .com and .net by hanniabu on Tuesday November 28, 2023 @12:30AM (#38442672)
Really surprised the HN crowd isn't more into ENS, but then again they see the word blockchain and their bias makes them turn off any ability to think rationally
Re:That time Verisign typo-squatted all of .com and .net by vore on Tuesday November 28, 2023 @03:18AM (#38443551)
Maybe make a real argument instead of attacking your own strawman?
Re:That time Verisign typo-squatted all of .com and .net by wmf on Tuesday November 28, 2023 @12:49AM (#38442777)
It seems like a good idea in theory but even if Chrome/Firefox/Safari decided to adopt it we'd probably have to wait 20 years before it "just works".
Re:That time Verisign typo-squatted all of .com and .net by hanniabu on Tuesday November 28, 2023 @08:49AM (#38445637)
You can add .limo and it'll resolve
Re:That time Verisign typo-squatted all of .com and .net by LoganDark on Tuesday November 28, 2023 @12:37AM (#38442711)
The bias is justified. I use crypto sometimes as a way to send money without linking it to my real identity, but that's all I use it for. I have no interest in how it's implemented, only that I have total privacy (at least with Monero).
Re:That time Verisign typo-squatted all of .com and .net by matheusmoreira on Tuesday November 28, 2023 @04:58AM (#38444175)
More people should use monero!
Re:That time Verisign typo-squatted all of .com and .net by mjan22640 on Tuesday November 28, 2023 @05:19AM (#38444295)
How does that total privacy work?
Re:That time Verisign typo-squatted all of .com and .net by immibis on Tuesday November 28, 2023 @07:25AM (#38444962)
Advanced cryptography. OTOH:

* Each transaction is signed by a "ring signature", where it's known that 1 of a set of 8 keys signed the transaction, but not which one. This is your actual input plus 7 other random inputs drawn from the same probability distribution as actual inputs.

* Double-spending is prevented by a "key image" which is something mathematically related to your actual key (not sure how that's verified without knowing which key it is). Each key image can only be used once, or it's a double-spend.

* Input amounts and output amounts have to balance using some kind of zero-knowledge proof.

Re:That time Verisign typo-squatted all of .com and .net by richardwhiuk on Tuesday November 28, 2023 @06:59AM (#38444816)
It doesn't.
Re:That time Verisign typo-squatted all of .com and .net by LoganDark on Tuesday November 28, 2023 @03:08PM (#38450555)
When you make a transaction on the Monero network, only the actual sender and recipient know the sender, recipient, or value of the transaction. This makes tumblers unnecessary and removes that whole ethical burden. If your Monero is ethically sourced (i.e. you mined it or bought it with your own money) then you can safely spend it without being subject to any tracking.
Re:That time Verisign typo-squatted all of .com and .net by realusername on Tuesday November 28, 2023 @01:47AM (#38443112)
That's fair because there's very few legitimate use cases for a blockchain.

Domain names are perfect for this purpose though, it's decentralized, secure and there's no way to claim the domain of somebody else.

Re:That time Verisign typo-squatted all of .com and .net by pbhjpbhj on Tuesday November 28, 2023 @03:32AM (#38443620)
>there's no way to claim the domain of somebody else.

That's a problem, surely, as it means all domain names become owned in perpetuity. That's good if you don't want governments to be able to have control, but it doesn't fit with current systems like Trademarks, but also just if there was an error or con that caused a domain to be transferred that you want to reverse. Also, over time domains become lost; which is sub-optimal in a limited namespace.

Re:That time Verisign typo-squatted all of .com and .net by realusername on Tuesday November 28, 2023 @03:41AM (#38443676)
It's my personal opinion but there's been way to much overeach from governments, registrars and various bad middlewares to make me think that resolving without interference is the #1 problem with DNS, not trademarks.

The current DNS is a bit like having HTTP everywhere, we need to upgrade to a more secure scheme.

Re:That time Verisign typo-squatted all of .com and .net by tsimionescu on Tuesday November 28, 2023 @07:00AM (#38444822)
ENS doesn't solve that problem though. Middlewares can still intercept requests, unless you download the whole blockchain locally. DoH or DoT solve the problem of snooping or changing DNS requests, or alternatively DNSSEC solves the problem of changing as well.

The part that blockchain addresses would actually get generally worse: typosquatting is already a problem, but at least most registrars are working to limit it - some more proactively than others. ENS removes any ability to prevent typosquatting at all. I have never heard anyone complain that registrars or governments are being TOO proactive in delisting typosquatters or those using domains they don't own the trademark for.

Re:That time Verisign typo-squatted all of .com and .net by immibis on Tuesday November 28, 2023 @07:27AM (#38444976)
If you flip that over, then trademarks will become the #1 problem, not resolving without interference. It will be just as bad, but different.

Maybe you're thinking of trademarks as some bureaucratic intellectual property nonsense but they are practically important as well. I could own ycombinator.com in that system. What would you do about it besides changing the name of Y Combinator?

Re:That time Verisign typo-squatted all of .com and .net by realusername on Tuesday November 28, 2023 @08:06AM (#38445263)
> Maybe you're thinking of trademarks as some bureaucratic intellectual property nonsense but they are practically important as well.

I do think their importance is vastly overstated yes but that's another debate.

Right now domains are also suspended for a lot of reasons, typosquatting being pretty much the only one I would describe as a valid reason. And the downsides of allowing domain suspension seems greater than the upsides.

I'd be okay changing my mind on the subject if DNS was used as intended and not as a political tool to suppress newspapers or block pirate websites.

Re:That time Verisign typo-squatted all of .com and .net by soap- on Tuesday November 28, 2023 @08:40AM (#38445568)
Does DoH not solve this?
Re:That time Verisign typo-squatted all of .com and .net by realusername on Tuesday November 28, 2023 @09:19AM (#38445936)
I don't think so because domains can still be suspended. It does solve some of the issues though
Re:That time Verisign typo-squatted all of .com and .net by Joker_vD on Tuesday November 28, 2023 @11:42AM (#38447717)
I haven't read RFC 882 all that thoroughly, but the section of it titled "Authority and administrative control of domains" strongly suggests that DNS from its very beginning allowed the name servers to implement whatever policies they wanted over the domain(s) they have authority over, so... DNS is actually working as intended?
Re:That time Verisign typo-squatted all of .com and .net by immibis on Tuesday November 28, 2023 @12:05PM (#38447998)
You can't solve social problems with technical solutions, usually. One exception, for the time being, is Tor. But that's only temporary until they ban it.

We take a free internet for granted, but in places like China, the government knows exactly what you're doing on the internet. They have to, because they route your packets, and they won't send your packets to places they aren't already spying on. No technological solution can change that, except possibly by constructing a physically parallel internet, and that stops working when...

An FSF member recommended Tor to Uighurs. An Uighur responded: "You don't understand. They aren't just monitoring my Internet. They're living in my house."

Re:That time Verisign typo-squatted all of .com and .net by realusername on Wednesday November 29, 2023 @02:28AM (#38456578)
> You can't solve social problems with technical solutions, usually.

I'd argue that historically it's the opposite, most social changes came from technical changes.

It's not about making it impossible to block websites but to increase the cost of doing it further.

There's a lot of in between places from Sweden to China and raising costs of doing the bad thing globally works.

Re:That time Verisign typo-squatted all of .com and .net by nightfly on Tuesday November 28, 2023 @02:12PM (#38449914)
Trademarks already have trouble on the Internet. Who gets dove.com, the chocolate company or the soap company? If I create a new Dove birdseed company and I register dove.biz will I get to keep it?
Re:That time Verisign typo-squatted all of .com and .net by Joker_vD on Tuesday November 28, 2023 @05:15AM (#38444269)
There is quite an amount of tech proposals that seem to fail to account for the fact that people actually die quite regularly.