3 ms·

This will not save you unfortunately. Sure, it will prevent the attacker from using realname.tld. But it won't stop an attacker from using real-name.tld, or re

by SCHiM 9y ago

This will not save you unfortunately. Sure, it will prevent the attacker from using realname.tld. But it won't stop an attacker from using real-name.tld, or realname.othertld. Or real.name.tld. Non technical people won't see, or don't know, the difference between the urls. I've seen it hundreds of times, you tell people don't open the e-mail unless you're sure it's from name.tld. But people don't know the difference.

kuschku 9y ago
That's correct — but this way, you can ensure that if the email is from the real TLD, it is real. And that's a massive advantage over previous systems. Sure, only cautious people, or tech people will take advantage, but it's better than nothing.
- cmurf 9y ago
  Actually I think it's worse, because it's just a variation on classism, but applied to the internet. Some people are being left behind to fend for themselves, the technology is in fact not egalitarian, it does not treat everyone equally (or neutrally if you will). And that is simply turning the internet into more of the "finders keepers losers weepers" we already have.
  - kuschku 9y ago
    Classicism is something entirely different. This is "people who have more knowledge will know more". Just like someone who learnt math in high and middle school will be able to budget better, and even improve their tax returns. This isn't classicism.
- toast0 9y ago
  The screenshoted email in this thread may actually be really from YouTube. I'm not familiar with YouTube community features though, but it looks like a spammy channel invited the receiver to do something through the YouTube UI. If Google had a good way to prevent that, they probably wouldn't have spammy channels. That said, even with dmarc and all, most email programs these days don't even show the domain name if there's a friendly name in the From field. Anyway, some people don't seem to notice that webmaster@johns-plumbing-blog.biz is sending them YouTube/eBay/whatever phishing links (even if the site in question never sends email like that), they just click through.

by SCHiM 9y ago

kuschku 9y ago

That's correct — but this way, you can ensure that if the email is from the real TLD, it is real. And that's a massive advantage over previous systems. Sure, only cautious people, or tech people will take advantage, but it's better than nothing.

cmurf 9y ago
Actually I think it's worse, because it's just a variation on classism, but applied to the internet. Some people are being left behind to fend for themselves, the technology is in fact not egalitarian, it does not treat everyone equally (or neutrally if you will). And that is simply turning the internet into more of the "finders keepers losers weepers" we already have.
- kuschku 9y ago
  Classicism is something entirely different. This is "people who have more knowledge will know more". Just like someone who learnt math in high and middle school will be able to budget better, and even improve their tax returns. This isn't classicism.
toast0 9y ago
The screenshoted email in this thread may actually be really from YouTube. I'm not familiar with YouTube community features though, but it looks like a spammy channel invited the receiver to do something through the YouTube UI. If Google had a good way to prevent that, they probably wouldn't have spammy channels. That said, even with dmarc and all, most email programs these days don't even show the domain name if there's a friendly name in the From field. Anyway, some people don't seem to notice that webmaster@johns-plumbing-blog.biz is sending them YouTube/eBay/whatever phishing links (even if the site in question never sends email like that), they just click through.