3 ms·
What about the consumers who are being put at risk of being defrauded? Do they not have a right to protection? Malware infected ecommerce sites could be steal
by jcoffland 10y ago
What about the consumers who are being put at risk of being defrauded? Do they not have a right to protection? Malware infected ecommerce sites could be stealing credit card info and robbing consumers. Merchants who endanger consumers by failing to provide a secure platform for digital transactions do not have any right to be protected from having their negligence exposed.
- chappi42 10y agoA 'normal consumer' won't be helped by such a technical list on github/gitlab. Do you really believe they would look there? If they wanted protection they could have installed Ad-blockers etc. long time ago already. (Or use more reputable shops)
- RubyPinch 10y agoa lot of non-normal consumers can end up making a lot of noise, sometimes its enough to cause change to happen as was noted, 600 sites have already cleaned up their act > Update Oct 14: 631 stores have been fixed, good work everybody! So is it really as useless as you claim?
- deleted 10y ago[deleted]
- chappi42 10y agoIt's really maybe not so useless as I thought. I forgot that such a list may show up on the first page when doing a google search for a (new) shop. The 631 stores have likely been fixed b/c of the publicity (thanks to kicking the list out;) I think I just don't like when this shame & name business happens on github/gitlab servers. Somewhere else, it's fine.
- goodplay 10y agoYou're saying that because normal consumers wont be helped by a "technical" list on github/gitlab, we shouldn't bother? What about "technical" users?
- jopsen 10y agoLots of people google the name of a webshop to check if it's legit. Not all, but some non-tech people do that.. And lots of webshop owners google their own shop. Shaming sites that are hosting malware seems perfectly reasonable. On topic: I assume github/gitlab both completely misunderstood what is going on, and thought this was a disclosure of security holes that could be exploited. I wouldn't be surprised if they do a lot of these. Perhaps try to throw it up on a few different CDNs where you pay for the service and can contact support. Like S3 or dreamhost (they have decent support too). Arguably github/gitlab isn't the best hosting platform for misunderstood journalists.
- weaksauce 10y agoHow long is the author going to check and update that list of compromised websites? Right now they are broken but in 6 months when the site gets upgraded it will be a knock against them unless the author updates the list. This is the real problem.
- jamespo 10y agoNot many do and they're even less likely to be on the first page of google hits.