5 ms·

> NATE DOT SILVER DOT MEDIA AT GMAIL DOT COM Artifacts of another age. This stuff won't work anymore.

nighthawk454 4y ago
Presumably it's not super serious as there's a mailto link right before it
walrus01 4y ago
particularly odd when natesilver.net and natesilver.com are both domains that exist and presumably owned by him (for well known public figure trademark reasons), he can't just point the MX for them at gsuite and then set up an inbox?
- Blahah 4y ago
  That opens a surprisingly large landscape of possible attacks and failure modes. The jsit obvious subset being things that happen when your paid gsuite gets disabled (not paying, abuse report, etc), or the domain lapses or is taken over. A basic free gmail account is very stable compared to almost any other option. L
  - walrus01 4y ago
    somebody of the public profile of Nate Silver presumably can hire IT/network people who know how to securely run authoritative DNS (or hire it out to a highly trusted third party as a service), so they can point the MX anywhere they want, and either do email in-house or hire it out to an email service specialist or big cloud service provider. The risk of having the gsuite paid services shut off are about the same as any other high dollar value paying customer using gsuite or office365 as an email service.
    - Blahah 4y ago
      The question was why not, and the answer was because it's more risky. Why would Nate Silver want to do all the things you correctly listed as options when he can simply use the safer, more simple, free gmail option?
skyyler 4y ago
It comes right after a mailto link so I don't think it was intended to stop spam. At least, I hope not.
labster 4y ago
As someone who has written a lot of regexen, I’m surprised it ever worked.
- Hamuko 4y ago
  Spammers aren't that smart, they will absolutely go where the bar is at its absolutely lowest, if not missing entirely. Just changing your SSH server to operate a port that is not 22 is going to stop most if not all random login attempts.
  - elbigbad 4y ago
    I wouldn’t characterize that example as “not smart” to be honest. I’m not particularly smart, but if someone has gone through the trouble of changing their secure socket port from 22, I would realize there would be more work and time involved in finding the actual port, and then it would be a safe assumption that, if found, it would have significantly more security hardening than the average port 22 because clearly the admin knows enough to change ports. So I might even characterize it as smart to not go after ssh ports that are not 22.
    - RobSm 4y ago
      The reason is different. When you need to scan 5 million IPs on 22 port is one thing, but 5 million IPs times 100 or 1000, then you simply run out of resources and since 99% of people use 22, why bother?
- qup 4y ago
  I used to scrape craigslist for local offers. Many times I needed to be the first to call, so I wanted my script to get the numbers. In about five minutes I came up with an algorithm that defeated most of the obfuscation tricks of the time: Strip whitespace, convert "five" to 5, remove special characters, and look for ten consecutive digits in the body text. Maybe a couple of small tweaks after that like removing text between digits. Most people, when they invent their little unique scheme, invent one that is already defeated by the algorithm above. At least for phone numbers. Anyway, all that to say you're right, it never worked.
dragonwriter 4y ago
> > NATE DOT SILVER DOT MEDIA AT GMAIL DOT COM > Artifacts of another age. This stuff won't work anymor Its not a protection scheme, its repeating the content of the mailto link with emphasis. (If it was a protection scheme, there wouldn’t be a mailto link.)
- haswell 4y ago
  I wondered if it's for accessibility reasons. Possibly a better experience for screen readers and such.
shusaku 4y ago
https://xkcd.com/1808/ https://xkcd.com/1808/

Presumably it's not super serious as there's a mailto link right before it

particularly odd when natesilver.net and natesilver.com are both domains that exist and presumably owned by him (for well known public figure trademark reasons), he can't just point the MX for them at gsuite and then set up an inbox?

Blahah 4y ago
That opens a surprisingly large landscape of possible attacks and failure modes. The jsit obvious subset being things that happen when your paid gsuite gets disabled (not paying, abuse report, etc), or the domain lapses or is taken over. A basic free gmail account is very stable compared to almost any other option. L
- walrus01 4y ago
  somebody of the public profile of Nate Silver presumably can hire IT/network people who know how to securely run authoritative DNS (or hire it out to a highly trusted third party as a service), so they can point the MX anywhere they want, and either do email in-house or hire it out to an email service specialist or big cloud service provider. The risk of having the gsuite paid services shut off are about the same as any other high dollar value paying customer using gsuite or office365 as an email service.
  - Blahah 4y ago
    The question was why not, and the answer was because it's more risky. Why would Nate Silver want to do all the things you correctly listed as options when he can simply use the safer, more simple, free gmail option?

skyyler 4y ago

It comes right after a mailto link so I don't think it was intended to stop spam. At least, I hope not.

labster 4y ago

As someone who has written a lot of regexen, I’m surprised it ever worked.

Hamuko 4y ago
Spammers aren't that smart, they will absolutely go where the bar is at its absolutely lowest, if not missing entirely. Just changing your SSH server to operate a port that is not 22 is going to stop most if not all random login attempts.
- elbigbad 4y ago
  I wouldn’t characterize that example as “not smart” to be honest. I’m not particularly smart, but if someone has gone through the trouble of changing their secure socket port from 22, I would realize there would be more work and time involved in finding the actual port, and then it would be a safe assumption that, if found, it would have significantly more security hardening than the average port 22 because clearly the admin knows enough to change ports. So I might even characterize it as smart to not go after ssh ports that are not 22.
  - RobSm 4y ago
    The reason is different. When you need to scan 5 million IPs on 22 port is one thing, but 5 million IPs times 100 or 1000, then you simply run out of resources and since 99% of people use 22, why bother?
qup 4y ago
I used to scrape craigslist for local offers. Many times I needed to be the first to call, so I wanted my script to get the numbers. In about five minutes I came up with an algorithm that defeated most of the obfuscation tricks of the time: Strip whitespace, convert "five" to 5, remove special characters, and look for ten consecutive digits in the body text. Maybe a couple of small tweaks after that like removing text between digits. Most people, when they invent their little unique scheme, invent one that is already defeated by the algorithm above. At least for phone numbers. Anyway, all that to say you're right, it never worked.

dragonwriter 4y ago

> > NATE DOT SILVER DOT MEDIA AT GMAIL DOT COM > Artifacts of another age. This stuff won't work anymor Its not a protection scheme, its repeating the content of the mailto link with emphasis. (If it was a protection scheme, there wouldn’t be a mailto link.)

haswell 4y ago
I wondered if it's for accessibility reasons. Possibly a better experience for screen readers and such.

shusaku 4y ago

https://xkcd.com/1808/ https://xkcd.com/1808/