Hacker News Reader

Comment by ozim | Hacker News Reader

Understand security, if there is malware in one file on your server you burn down the server and set up new one.

If your machine gets infected you format all because it is insecure by definition. You might even need to throw out physical machine...

If you get one it downloads ten other and you don't know which one will pass your virus scanner.

It is not fun and games anymore, silly nerds having fun are not doing it. It is actual crime and really bad guys that would kill you without blinkink an eye are doing malware.

If there is one infected file on your domain you consider whole domain compromised.

View on HN

What you say is true, but how is this relevant to the discussion at hand?

It speaks to the argument that “if this site is serving up infected files, all files it serves should be treated as potentially infected”

That would include domains like dropbox.com or drive.google.com then?

Security is always complex, and simple rules always have flaws. That doesn’t mean simple rules are always bad, it just means people who build systems around them do need to understand they need to do more than just blindly follow simple rules. I’m pretty sure you’ll find FF doesn’t alert on those sites, because they are being handled by a more complex rule than a vanilla low or medium traffic site.

Funny thing is article is saying "Unfortunately, this message isn’t always accurate. Apparently, sometimes this message is an outright lie.".

So it is not like this domain hosts one bad file and it got flagged, it is apparently more often if it "sometimes .. is .. lie".

Do you trust dropbox.com that they separate their servers, do you trust google that they do good job in terms of security and containing malware to single file? If yes then there is no need to include those.

On the other hand if you don't trust then those should be included.

Question is, does Mozilla trust google enough? Does Mozilla trust some random website where people host pirated content?

That is random article written by some random guy. Seems like he is more technical than average Joe, but he does not have any statistics to show why this behaviour was implemented. It just looks like a nag that he get his pirated downloads flagged by Firefox. It is backed up by bunch of people who also use it on /r/libgen. If they don't like it they can move to IE6.

Every file you download from site serving pirated content is high potential for malware.

I trust Mozilla more than some pirated content website or their user.

If you need that content more than you are afraid to be hacked and understand risks involved you are good to go.

People who are not aware of that threat need to be warned. Telling nicely does not work and people will click OK without reading.

Just as I wrote it is not fun and games and magic unicorns from internetz are not giving latest movies/programs for free.

Yes it is censorship, but as I wrote if you understand the risk and know what to do you will find your way to download it without firefox.

Reply on news.ycombinator.com