5 ms·

A 'normal consumer' won't be helped by such a technical list on github/gitlab. Do you really believe they would look there? If they wanted protection they could

A 'normal consumer' won't be helped by such a technical list on github/gitlab. Do you really believe they would look there? If they wanted protection they could have installed Ad-blockers etc. long time ago already. (Or use more reputable shops)

RubyPinch 10y ago
a lot of non-normal consumers can end up making a lot of noise, sometimes its enough to cause change to happen as was noted, 600 sites have already cleaned up their act > Update Oct 14: 631 stores have been fixed, good work everybody! So is it really as useless as you claim?
- deleted 10y ago
  [deleted]
- chappi42 10y ago
  It's really maybe not so useless as I thought. I forgot that such a list may show up on the first page when doing a google search for a (new) shop. The 631 stores have likely been fixed b/c of the publicity (thanks to kicking the list out;) I think I just don't like when this shame & name business happens on github/gitlab servers. Somewhere else, it's fine.
goodplay 10y ago
You're saying that because normal consumers wont be helped by a "technical" list on github/gitlab, we shouldn't bother? What about "technical" users?
jopsen 10y ago
Lots of people google the name of a webshop to check if it's legit. Not all, but some non-tech people do that.. And lots of webshop owners google their own shop. Shaming sites that are hosting malware seems perfectly reasonable. On topic: I assume github/gitlab both completely misunderstood what is going on, and thought this was a disclosure of security holes that could be exploited. I wouldn't be surprised if they do a lot of these. Perhaps try to throw it up on a few different CDNs where you pay for the service and can contact support. Like S3 or dreamhost (they have decent support too). Arguably github/gitlab isn't the best hosting platform for misunderstood journalists.
- weaksauce 10y ago
  How long is the author going to check and update that list of compromised websites? Right now they are broken but in 6 months when the site gets upgraded it will be a knock against them unless the author updates the list. This is the real problem.
- jamespo 10y ago
  Not many do and they're even less likely to be on the first page of google hits.

RubyPinch 10y ago

a lot of non-normal consumers can end up making a lot of noise, sometimes its enough to cause change to happen as was noted, 600 sites have already cleaned up their act > Update Oct 14: 631 stores have been fixed, good work everybody! So is it really as useless as you claim?

deleted 10y ago
[deleted]
chappi42 10y ago
It's really maybe not so useless as I thought. I forgot that such a list may show up on the first page when doing a google search for a (new) shop. The 631 stores have likely been fixed b/c of the publicity (thanks to kicking the list out;) I think I just don't like when this shame & name business happens on github/gitlab servers. Somewhere else, it's fine.

goodplay 10y ago

You're saying that because normal consumers wont be helped by a "technical" list on github/gitlab, we shouldn't bother? What about "technical" users?

jopsen 10y ago

Lots of people google the name of a webshop to check if it's legit. Not all, but some non-tech people do that.. And lots of webshop owners google their own shop. Shaming sites that are hosting malware seems perfectly reasonable. On topic: I assume github/gitlab both completely misunderstood what is going on, and thought this was a disclosure of security holes that could be exploited. I wouldn't be surprised if they do a lot of these. Perhaps try to throw it up on a few different CDNs where you pay for the service and can contact support. Like S3 or dreamhost (they have decent support too). Arguably github/gitlab isn't the best hosting platform for misunderstood journalists.

weaksauce 10y ago
How long is the author going to check and update that list of compromised websites? Right now they are broken but in 6 months when the site gets upgraded it will be a knock against them unless the author updates the list. This is the real problem.
jamespo 10y ago
Not many do and they're even less likely to be on the first page of google hits.