Why not add a Report button and start charging for the service?
Why not add a Report button and start charging for the service?
Having a consumer download a sketchy file from what should be a trusted service (it's firefox! they're the good guys!) is not good for your company image, either.
And unfortunately, charging for a service is no guarantee that these issues will go away. I have seen fraud links from many b2b services presumably caused by credential misuse. If you operate a file sharing service, please be sure that there is a way to report a file either on the download page or on the contact us page. I'm the guy with too much time on his hands and actually follows up on reported phish emails and I've seen many services with no reporting mechanisms. Also, give your customers their own subdomain so I can selectively allow them in the palo alto.
I just don't understand this kind of logic. I can send mail bombs with the trusted postal service and people will open them. Does anyone blame the postal service?
Yes?
Do you think the USPS does nothing to detect bombs in the mail?
You can’t earn trust by saying “that’s not my problem.”
Which they also scan for?
The USPS does try to keep the mail safe, and generally does a good job.
Mozilla cannot make the same guarantees about Send so they shut it down.
Well, and with encryption the files going through mozilla are always properly sealed and they can only rely on external indicators such as reports or IP blacklists. So they're doing no worse than USPS.
https://www.cidrap.umn.edu/news-perspective/2003/06/postal-s...
Your framing suggests that Firefox Send was a 'public utility', held to the same standard as a power company or a gas company, required to provide service to all who seek it. Firefox Send was not a 'public utility', though, and so it need not be temporary to shut it down in the face of attackers. Apparently the Firefox group decided to make it permanent.
What if Gmail was shutdown without notice tomorrow? Would any lawsuit have standing if refunds were issued that same day? Would free users have any recourse whatsoever? It isn't a public utility, right?