3 ms·
OK but still, if your primary product is hosting user generated websites, it's a problem even if your "corpsite" marketing page stays up while your entire produ
by 0x0000000 3y ago
OK but still, if your primary product is hosting user generated websites, it's a problem even if your "corpsite" marketing page stays up while your entire product is down.
How does github pages or neocities, for example, handle this kind of thing? Surely I can't bring down every github page by linking to a malicious Google drive file from my own page?
- deleted 3y ago[deleted]
- fragmede 3y agoThey handle this by serving user content from githubusercontent.com for this exact reason.
- 0x0000000 3y agoI think you may be missing my point. How does one user serving malicious content from githubusercontent.com not result in the takedown/blacklisting of all users' content on githubusercontent.com? Sure, I understand how github.com is protected here, but I'm also unaware of github pages being totally blacklisted by Google even though I'm certain there have been malicious pages hosted there. You can only limit the blast radius so much if the product itself is "hosting user content."