3 ms·

The only way--the only way--to solve these issues is with web servers requiring that all clients authenticate with a credential that is provably tied to a real-

The only way--the only way--to solve these issues is with web servers requiring that all clients authenticate with a credential that is provably tied to a real-world entity--person or corporate entity--so that legal recourse is available to the server owner when abuse occurs. The internet is no longer high-trust; we're running web servers the same way we'd run an honor-system store where people just come in and steal, anonymously, and with no recourse.

batata_frita 2y ago
We're just ruining the last good part of internet
ronsor 2y ago
I guess I'm done using the Internet then.
eesmith 2y ago
$125 and I can start an LLC. That's a real-world corporate entity. Recourse ends at the "limited liability" in LLC. Make that LLC owned by another? Offshore ownership? Might take a few thousand bucks.
- ronsor 2y ago
  Cheaper than that, and the Secretary of State doesn't actually verify anything.
JohnFen 2y ago
The truth and tragedy of this is very clear to me. I am hoping this is something that will eventually be solved, but I don't expect it. These companies are on a burn-and-pillage rampage.
Verdex 2y ago
I don't know. Once I know the who the legal entity is who I assert is a bad actor, I'm not sure there is really an recourse to be had. Your honor, these people are visiting my website in a way that makes me sad? I feel that we would need to encode bad behavior in a legally reasonable way first. And not to mention that you'll have to bring legal disputes a legal entity at a time. And some of these legal entities have very deep pockets. Unless the suggestion is that internet providers are all going to join together to stand up for the little guy? Somehow I'm not optimistic. (Finally IPv6 has taken decades to get to where it is today. Somehow I don't see legally attributable IP traffic extension to be ready and deployed any faster)
- deleted 2y ago
  [deleted]
akomtu 2y ago
In reality, users will have to show passport to use the internet, while corporations will hide behind a "Corporate ID" that's whitelisted in all authenticator services, because those are also corporations. So you'll keep getting millions of requests from corp234 and corp456 with no legal recourse against them.
reginald78 2y ago
Anubis (or something similar) is an alternative option: https://github.com/TecharoHQ/anubis https://github.com/TecharoHQ/anubis Aside from the obvious disadvantages of a non-anoynmous web I also don't even think it will work. How do you deal with identification and punishment of threat actors across the globe? We've been failing at that since the start. When was the internet ever high trust?
- hollerith 2y ago
  >When was the internet ever high trust? In the 1970s and 1980s.

batata_frita 2y ago

We're just ruining the last good part of internet

ronsor 2y ago

I guess I'm done using the Internet then.

eesmith 2y ago

$125 and I can start an LLC. That's a real-world corporate entity. Recourse ends at the "limited liability" in LLC. Make that LLC owned by another? Offshore ownership? Might take a few thousand bucks.

ronsor 2y ago
Cheaper than that, and the Secretary of State doesn't actually verify anything.

JohnFen 2y ago

The truth and tragedy of this is very clear to me. I am hoping this is something that will eventually be solved, but I don't expect it. These companies are on a burn-and-pillage rampage.

Verdex 2y ago

I don't know. Once I know the who the legal entity is who I assert is a bad actor, I'm not sure there is really an recourse to be had. Your honor, these people are visiting my website in a way that makes me sad? I feel that we would need to encode bad behavior in a legally reasonable way first. And not to mention that you'll have to bring legal disputes a legal entity at a time. And some of these legal entities have very deep pockets. Unless the suggestion is that internet providers are all going to join together to stand up for the little guy? Somehow I'm not optimistic. (Finally IPv6 has taken decades to get to where it is today. Somehow I don't see legally attributable IP traffic extension to be ready and deployed any faster)

deleted 2y ago
[deleted]

akomtu 2y ago

In reality, users will have to show passport to use the internet, while corporations will hide behind a "Corporate ID" that's whitelisted in all authenticator services, because those are also corporations. So you'll keep getting millions of requests from corp234 and corp456 with no legal recourse against them.

reginald78 2y ago

Anubis (or something similar) is an alternative option: https://github.com/TecharoHQ/anubis https://github.com/TecharoHQ/anubis Aside from the obvious disadvantages of a non-anoynmous web I also don't even think it will work. How do you deal with identification and punishment of threat actors across the globe? We've been failing at that since the start. When was the internet ever high trust?

hollerith 2y ago
>When was the internet ever high trust? In the 1970s and 1980s.