Hacker News Reader

Comment by ikeboy | Hacker News Reader

If you have a disclosure policy, chances are googling "company name + disclosure" will bring it up. Don't really see benefits of standardising this, not going to help any companies that previously had no disclosure policies decide to implement one and "discoverability of existing disclosure policies" doesn't really seem like a big issue.

View on HN

The more you use a Google feature as a crutch, the less the web is semantic.

Also, Google has increasingly made it difficult to automate searches, so the effort required to notify multiple websites increases quickly.

> Also, Google has increasingly made it difficult to automate searches

That's an understatement. Doing something as simple as

    inurl:"humans.txt"

...and consuming the first three pages showed me CAPTCHA. It was done via a browser, manually. Not all links were clicked.

Yep, I run across this often. Kind of funny that using a bit more advanced functionality instantly makes you suspicious.

A few years ago, my gmail account was suspended for suspicious activity after I sent two messages to verify that my own email server is working following some updates & configuration changes.

Since then, it's been hard to justify using gmail for anything serious.

> ... the less the web is semantic.

Yes, predating this and .well-known, the principle exists as https://en.wikipedia.org/wiki/Semantic_URL

There was a website way back in the 90s which encouraged a standardisation of paths such as /about, /products, /services etc.

Enables automated vulnerability disclosure.

Nobody wants this. Automated disclosure means getting even more automated-scan reports. Total waste of time.

The data behind this is not machine readable anyway, what's the gain here?

Reply on news.ycombinator.com