News for hackers. Stuff that matters.

ohashi

Re:DNS Abuse and Criminal Infrastructure on Monday August 31, 2026 @03:01PM (#49513568)
That presentation is... weird.

For example, claiming 4 registry families having over a million blocker domains. But there aren't that many registries... and the domains under management by registry is... skewed. .com (verisign) is 37% of all domain registrations. Not to mention .net and other TLDs they manage. So the fact they come in below that number seems meaningless and skewed? I say this as someone who hates Verisign because they're a terrible monopolist.

Then the registrar families with highest domains blocked.

NameCheap registered 14m and had 1.1m abuse domains (~8%) gname had 3.1m with 1m abuse (~32%), dynadot (~20%), namesilo (~20%), godaddy (~5%). That feels pretty unfair calling out NameCheap and GoDaddy who have a fraction of the abuse the other 3 have but show up simply because of their scale?

The registrars with 50%+ of domains blacklisted and top one being 87% screams for an investigation though.

It seems to highlight some potentially suspect actors but also throwing some large companies under the bus simply because they're big?

Re:A domain can now say it is for sale, in DNS on Saturday August 08, 2026 @11:08AM (#49222560)
full disclaimer, I have worked on https://udrp.tools for something like a decade now as the developer. We're working on an AI chatbot to help answer these types of questions based on our dataset and other data sources (actual wipo guidelines, udrpperspectives.org). The short answer is no, the answer our AI gave with citations/explanation is below if youre curious:

Does publicly listing a domain for sale mean you'd automatically lose a UDRP arbitration if someone has a trademark for it?

No. A public sale listing is not an automatic loss. Here's how panels actually decide these cases.

The controlling rule

Bad faith based on a sale offer requires that the domain was registered primarily for the purpose of selling to the trademark owner (or a competitor) for more than out-of-pocket costs. Two things must be true at once: (1) the primary purpose of registration was to sell, and (2) the target was that specific trademark holder. A generic public listing on Sedo or Afternic doesn't automatically satisfy either requirement. (WIPO Overview 3.1; UDRP Perspectives 3.5)

What panels actually look at

No single factor decides it. Panels weigh all of these:

How distinctive is the trademark? A coined word like KODAK is treated very differently from a generic term like CLOUD.

Did the registrant plausibly know about the mark when registering? Famous marks raise this inference; obscure marks don't.

Was the offer directed at the trademark owner specifically, or listed publicly for any buyer?

Does the asking price only make sense if the trademark owner is the buyer, or is it consistent with general market prices?

Does the registrant hold a broader portfolio of generic/descriptive domains, or a collection of brand-matching ones?

Was the domain registered after the mark became well-known, or before?

Is there a credible non-trademark reason to want the domain?

Things that do NOT automatically mean bad faith

Listing a domain publicly for sale (UDRP Perspectives 3.5)

Asking a high price (UDRP Perspectives 3.5; WIPO Overview 3.1.1)

Even reaching out to the trademark owner directly — panels look at whether multiple parties were approached and whether the registration was brand-specific (UDRP Perspectives 3.5)

Wanting to profit — legitimate domain investing is a recognized lawful activity under UDRP (UDRP Perspectives 2.6)

When the calculus shifts against you

The harder cases are where the domain is identical to a highly distinctive coined brand, there's no plausible use for the domain other than trading on the trademark, and the asking price is only realistic for the trademark owner itself. In those cases panels have found bad faith even without a direct approach to the owner. A notable example is the three-member panel majority in WIPO case D2022-1570, which found that the asking price implied the complainant was the only conceivable buyer — though a dissent disagreed, illustrating that even these edge cases are not automatic.

Bottom line

The outcome depends on: how famous and distinctive the mark is, whether you had it in your sights at registration, whether there's a credible independent reason to want the domain, and who you're actually marketing it to. Generic terms with multiple plausible buyers, listed publicly, have repeatedly survived UDRP challenges. (UDRP Perspectives 3.5) Coined-brand matches with sky-high asking prices and no other credible use have not.

I help run a domain legal case search engine (UDRP.tools) and we run into this type of stuff too. Notices that results are being purged. It's bullshit. We aggregate legal case data and provide analytics about UDRP cases. These aren't private and it's not personal information. It's all coming from publicly documented arbitration decisions. Trying to hide/erase your history in (domain) court on google claiming copyright is a lie. eg. https://lumendatabase.org/notices/27934920
Re:Delve Removed from Y Combinator on Saturday April 04, 2026 @06:35AM (#47637801)
Maybe someone should start an auditing company for YC... oh
That's why I found this interesting, a variety of sources provides different viewpoints on risk. I may not personally agree, but it does help give many perspectives.
Yeah that scraper is... not fully ready yet, why I put BETA label on it.

Room for improvement. Thanks :)

I've been working on a similar idea for travelers, https://travelsafetydata.com/

It's pulling the travel advisories from US/CA/UK/IE/AU/NZ and aggregating the results/information to help you understand the risks of different countries. It also pulls from other sources for basic country info/risks (eg. women, lgbtq).

Yours is way lighter weight and focused, very cool!

Re:Show HN: Travel Safety Data on Friday January 02, 2026 @08:43AM (#46464658)
Thank you! The idea of trending/historical data is definitely on the radar. As it runs and updates over time, I might actually have this data and be able to add it in the future. I agree with you seeing if things are trending up or down could be really insightful.

Show HN: Travel Safety Data

https://travelsafetydata.com/

I've had this idea sitting in a file for years but until I just got Claude Code at Christmas time, never had to time to actually implement it. It seemed like a good test for Claude Code and with 2x christmas usage, why not?The goal was aggregating different travel warnings from multiple government sources to get a sense of how safe a country was to visit. It aggregates from US, Canada, Ireland,...

( Read More... | 2 comments | 2 points | on HN )
Isn't having the power to get everyone to do things that favor your service... a monopoly?
I believe there is a private right of action on anti trust.

If you're really interested in it, I suggest subscriber to https://www.thebignewsletter.com/

Because they are mostly software developers who think it's different because it impacts them.
We just use a slack. The overwhelming single channel? nope. channels for all the hobbies, shitposting, news, games, etc. We even have a discord notification for gaming channel when people get on the gaming channel. Separate notification for the chat channel if someone wants to just chill.
Re:X's Sales Pitch: Give Us Your Ad Business or We'll Sue on Wednesday June 11, 2025 @10:29AM (#44248010)
"People close to X said the platform pressed vendors that were supplying it with goods or services to spend money on advertising. X is a customer of Amazon Web Services, its cloud-computing unit, and had past-due bills for that. X used those unpaid bills as leverage during negotiations, according to people familiar with the matter."

So Elon doesn't pay his bills either. Not surprising. I wish Amazon just cut services until bills paid, see who actually has leverage in that situation when nothing operates to run ads on and the cesspool can't spread.

Hi HN,

I'm super excited to share the open source project I've been working on for the past year because it is finally ready for general use (I hope!).

The project is called Orderly Ape, it's an open source (MIT) distributed, scalable load testing platform that uses k6, grafana, influxdb and kubernetes. It lets you run k6 load tests on your infrastructure and gives you complete control/ownership of the execution and data.

I was motivated to create Orderly Ape because I work a lot with hosting companies and testing them (I run WPHostingBenchmarks.com). It wasn't financially viable to run many large scale tests to benchmark all these companies, so I built Orderly Ape. It allows me to run tests at a fraction of the cost now, no VUser pricing, just the hardware needed to run the tests - scaled/spun up when I need it.

I finally finished documenting (and creating video tutorials) on how to setup/install/run everything. So now people can hopefully actually give it a try.

I would appreciate any feedback/bugs/suggestions/pull requests :)

Re:The Windows Subsystem for Linux is now open source on Monday May 19, 2025 @01:16PM (#44032140)
I liked the networking in WSL1 more too
Re:Ross Ulbricht was just granted a full pardon on Wednesday January 22, 2025 @03:00AM (#42790260)
Are we pretending the silk road was actually a legitimate marketplace and a few bad actors might have used it for things that break the law?
Re:Bitcoin price hits $100K for first time in history on Thursday December 05, 2024 @06:20AM (#42327068)
Because there was naive optimism about it as a technology?
You seem to be mistaking that a startup is a business and an open source project doesn't need to be. One can simply want to build something and give the code away for free because the world benefits far more from that than trying to monetize it as a business and having fewer people use it.
Re:Floss/fund: $1M per year for free and open source projects on Wednesday October 16, 2024 @10:34AM (#41859499)
I was curious how they might handle something that isn't ready yet, but in the process of being built. But that answers it, it's not eligible. Oh well :( Plenty of good open source out there deserving as well.
This is the most obvious reason why Verisign is a monopolist and should be regulated like a utility. They make false claims about choice and not being locked in. You buy a domain, you use it, you're locked in forever. And they know it. That's why they fight tooth and nail to protect their monopoly.
Re:Court handcuffs employees with non-compete agreements – again on Wednesday September 04, 2024 @07:25PM (#41451895)
Pretty sure that judge's party already is trying to turn the country into Putin's Russia.
Re:Court handcuffs employees with non-compete agreements – again on Wednesday September 04, 2024 @07:24PM (#41451890)
That's the case in some European countries and it seems fair. If you don't want me competing, you pay for that privilege. Otherwise, the non compete is just an abuse of power.
Re:Court handcuffs employees with non-compete agreements – again on Wednesday September 04, 2024 @07:20PM (#41451875)
It's by design, they don't want any regulation. They want government to not work. They are doing their best to make both a reality, at the expense of the average person.
Re:Buy, Borrow, Die – Explained on Sunday September 01, 2024 @06:11AM (#41415654)
Basically, you don't believe in government except to protect you from others who might take, while you have would have to ability to take advantage of others freely. No basic humans should be satisified by the government.

That's exactly what the ultra wealthy seem to generally believe too. Sorry that many of us reject your premise that you should be freely protected to screw over everyone else and think that's a moral decision (it's not, but I won't waste my time).

Re:Buy, Borrow, Die – Explained on Saturday August 31, 2024 @06:09PM (#41412407)
If that home is over 10, 13 or 20m dollars... you can pay tax on it. If you have siblings, I assume it would be divided between you, so multiply value by siblings.

If you got a home worth that much, you can pay some taxes on it.

https://www.mansionglobal.com/articles/more-than-1-500-homes...

1,500 homes sold for over 10m in a year. We're talking about the richest of the rich. That's exactly who should be paying some taxes. The people bitching about losing 'their' home this way... are either a) delusional or b) looking for a way to protect their incredible wealth.

Is your family home worth more than 10 or 20m dollars?

Re:Buy, Borrow, Die – Explained on Saturday August 31, 2024 @04:16PM (#41411628)
There's plenty of valuable information on reddit. In fact, there's a strong search trend to put 'reddit' on search queries to get better results.

Could this guy be LARPing? Sure.

I looked up a few of the references, they look accurate. They would need to be an excellent LARPer to get that detailed. Or they actually know what they are talking about.

Re:Buy, Borrow, Die – Explained on Saturday August 31, 2024 @04:11PM (#41411598)
Seems straight forward enough, put a value cap on it. $10 million? 20 million? Is anyone going to feel bad for the poor soul who can't pay the tax bill on a free 20 million dollar home?

We have a limit on gifts and according to this is 13 million. Just make it that.

What would be the downside here other than extremely wealthy having to pay some taxes upon death?

Older »