3 ms·
> Bullshit. no, not bullshit. see the screenshots in this thread and the tweet in the post itself where the two stripe sites are compared side by side. making
by tribby 8y ago
> Bullshit.
no, not bullshit. see the screenshots in this thread and the tweet in the post itself where the two stripe sites are compared side by side. making a "look how useless EV SSL is" site through a phishing example isn't a good strategy for maintaining an EV SSL cert, clearly. he was practically asking them to revoke it, and they gave him what he wanted.
> (My site sells legally scraped public data from that BigCo's website, instead of suing me they prefer to just keep my site offline)
it sounds reasonable that cloudflare kicked you off, too. you may not be breaking the law, but you're not respecting BigCo's terms of service and you can't expect a red carpet given the nature of the business you're in. seems like an interesting/fun game of cat and mouse, in any case :)
I'd be much more worried about this kind of thing if it were happening to good/neutral actors. but as presented it just seems like the centralized internet doing a pretty OK job of policing itself.
- ryanlol 8y ago>the screenshots in this thread and the tweet in the post itself where the two stripe sites are compared side by side It's not at all clear whether or not the page was ever publicly accessible like that. It certainly doesn't appear that he was distributing the link to the page if/when it looked like that. https://web.archive.org/web/20171211181630/https://stripe.ian.sh/ https://web.archive.org/web/20171211181630/https://stripe.ia... https://crt.sh/?id=393002115&opt=ocsp https://crt.sh/?id=393002115&opt=ocsp The site looked like this for at least 4 months until the cert was revoked. "obvious bid to confuse people" was a pretty harsh accusation, and you have essentially nothing back it up. >site through a phishing example Even if he had copied the stripe page, that still wouldn't make it phishing.
- deleted 8y ago[deleted]