If you are up for a fight see this comment https://news.ycombinator.com/item?id=41949905
And thanks for the warning!
14 karma · joined October 25, 2024
If you are up for a fight see this comment https://news.ycombinator.com/item?id=41949905
And thanks for the warning!
I think the mistake here is the redirect old to new. That is always risky so only do it if deseprate. In this case I would have done the redirect from new to old. Then just use the new as a vanity url.
So you have a transitioning issue. You suddenly allow this company name sending a script to a domain they control then it is too dangerous.
Test data like you mentioned is a great idea to increase resiliance. However I don't think that rises the overall ecosystem of consumers of this data to the right level to release actual exploits into the dataset.
Downvoters are probably thinking purely. They are thinking "everyone in the world should make their systems 100% secure against common exploits and let a company name be an arbitrary string".
The problem is that is not realistic.
It works at a corporate level but not across all actors who interact with this dataset and the global internet. You can "should" at them all you like but no one has control over this.
The government can choose: more exploits in the wild or fewer. Allowing script URLs they dont control in company names is the former.
Profiteers had no problem. Vapers had no problem. The government had a problem.
This shows democracy actually working IMO. You elect people you trust and then they do the right thing despite individual people not doing that collectively.
Tax is one big pool of money and I doubt the money will be used to fix the issues created.
A similar idea, carbon taxes and carbon credits trading seemed politically dead at least in my country even though it is a fantastic idea.
Edit: what might work is a 5-10 British pound ransom, released on return of the disposible to a recycling centre. Give the used devices free to a reclaiming merchant that operates out of the same country.