4 ms·

Getting rid of Send is so disappointing. That was a hugely useful tool. Why not add a Report button and start charging for the service?

Thin_icE 6y ago
Indeed, it was so useful, they could simply tie Send uploads with Firefox accounts and block the abusers. It's so sad to see this amazing service die.
- blytt 6y ago
  Perhaps someone else can pick up https://github.com/mozilla/send https://github.com/mozilla/send? Not sure how much of this is the production code or not.
jabroni_salad 6y ago
The implicit problem is you have to know the download is sketchy in order to report abuse. For your average consumer, that will be after they downloaded it. Having a consumer download a sketchy file from what should be a trusted service (it's firefox! they're the good guys!) is not good for your company image, either. And unfortunately, charging for a service is no guarantee that these issues will go away. I have seen fraud links from many b2b services presumably caused by credential misuse. If you operate a file sharing service, please be sure that there is a way to report a file either on the download page or on the contact us page. I'm the guy with too much time on his hands and actually follows up on reported phish emails and I've seen many services with no reporting mechanisms. Also, give your customers their own subdomain so I can selectively allow them in the palo alto.
- the8472 6y ago
  > Having a consumer download a sketchy file from what should be a trusted service (it's firefox! they're the good guys!) is not good for your company image, either. I just don't understand this kind of logic. I can send mail bombs with the trusted postal service and people will open them. Does anyone blame the postal service?
  - colonelxc 6y ago
    usps does scan packages though...
  - mulmen 6y ago
    > Does anyone blame the postal service? Yes? Do you think the USPS does nothing to detect bombs in the mail? You can’t earn trust by saying “that’s not my problem.”
    - deleted 6y ago
      [deleted]
    - the8472 6y ago
      Ok, fine, they scan for bombs. So people shift to mailing sealed anthrax envelopes (which has happened). A public service is also going to be used by criminals, yet we do not expect the service to be shut down.
      - mulmen 6y ago
        > So people shift to mailing sealed anthrax envelopes (which has happened). Which they also scan for? The USPS does try to keep the mail safe, and generally does a good job. Mozilla cannot make the same guarantees about Send so they shut it down.
        the8472 6y ago
        Ok, I googled a bit. According to this[0] they're running PCR tests on samples from the air around the mail processing. I.e. outside the mail. In a sufficiently sealed package/enveloped that wouldn't be detected. Well, and with encryption the files going through mozilla are always properly sealed and they can only rely on external indicators such as reports or IP blacklists. So they're doing no worse than USPS. https://www.cidrap.umn.edu/news-perspective/2003/06/postal-service-test-anthrax-detection-systems-14-sites https://www.cidrap.umn.edu/news-perspective/2003/06/postal-s...
      - Spivak 6y ago

Thin_icE 6y ago

Indeed, it was so useful, they could simply tie Send uploads with Firefox accounts and block the abusers. It's so sad to see this amazing service die.

blytt 6y ago
Perhaps someone else can pick up https://github.com/mozilla/send https://github.com/mozilla/send? Not sure how much of this is the production code or not.

jabroni_salad 6y ago

The implicit problem is you have to know the download is sketchy in order to report abuse. For your average consumer, that will be after they downloaded it. Having a consumer download a sketchy file from what should be a trusted service (it's firefox! they're the good guys!) is not good for your company image, either. And unfortunately, charging for a service is no guarantee that these issues will go away. I have seen fraud links from many b2b services presumably caused by credential misuse. If you operate a file sharing service, please be sure that there is a way to report a file either on the download page or on the contact us page. I'm the guy with too much time on his hands and actually follows up on reported phish emails and I've seen many services with no reporting mechanisms. Also, give your customers their own subdomain so I can selectively allow them in the palo alto.

the8472 6y ago
> Having a consumer download a sketchy file from what should be a trusted service (it's firefox! they're the good guys!) is not good for your company image, either. I just don't understand this kind of logic. I can send mail bombs with the trusted postal service and people will open them. Does anyone blame the postal service?
- colonelxc 6y ago
  usps does scan packages though...
- mulmen 6y ago
  > Does anyone blame the postal service? Yes? Do you think the USPS does nothing to detect bombs in the mail? You can’t earn trust by saying “that’s not my problem.”
  - deleted 6y ago
    [deleted]
  - the8472 6y ago
    Ok, fine, they scan for bombs. So people shift to mailing sealed anthrax envelopes (which has happened). A public service is also going to be used by criminals, yet we do not expect the service to be shut down.
    - mulmen 6y ago
      > So people shift to mailing sealed anthrax envelopes (which has happened). Which they also scan for? The USPS does try to keep the mail safe, and generally does a good job. Mozilla cannot make the same guarantees about Send so they shut it down.
      - the8472 6y ago
        Ok, I googled a bit. According to this[0] they're running PCR tests on samples from the air around the mail processing. I.e. outside the mail. In a sufficiently sealed package/enveloped that wouldn't be detected. Well, and with encryption the files going through mozilla are always properly sealed and they can only rely on external indicators such as reports or IP blacklists. So they're doing no worse than USPS. https://www.cidrap.umn.edu/news-perspective/2003/06/postal-service-test-anthrax-detection-systems-14-sites https://www.cidrap.umn.edu/news-perspective/2003/06/postal-s...
    - Spivak 6y ago