Hacker Timesnew | past | comments | ask | show | jobs | submit | luser007's commentslogin

Tangentially related:

Somebody created a github containing domains he thought should be blocked: https://github.com/chadmayfield/my-pihole-blocklists

A year later I bought a domain that had expired under my country TLD. It turns out that domain for some reason was previously added to that list.

Now, as you can see, the man behind that Github repo has decided to archive that repo and therefore make it read only.

As you can tell from both pull requests and issues on that repo, people has asked him to remote legitimate domains (e.g. *.urbandictionary.com). But those calls remain unanswered. It is fruitless to contact the author.

So this random dude causes real problems for legitimate business and individuals and we should just accept it?

Obviously he doesn't act on friendly geek requests. It seems lawyering up would be the only recourse in this situation. I find it analogous to somebody standing on a soap box in a village and announcing: "Don't trust James. Don't trust Mary either. There's problems with Charles" and James, Mary, and Charles have no way of stopping his libel.

I don't have the funds for legal action, but it is obviously wrong that he can announce "these domains are bad" and offer no way of fixing mistakes. He should take down the repo, but oh that sweet sweet Github karma probably discourages him from doing so.


> I find it analogous to somebody standing on a soap box in a village and announcing: "Don't trust James. Don't trust Mary either.

You're speaking of some random domain-list on github - that isn't even maintained? Taken from someone's private pihole?

Anyone using a list of that kind to block is simply incompetent. Even as part of a scoring system, it's pretty silly. Before adding a blocklist, a postmaster needs to familiarize herself with the list's policies. Are list entries aged-out? How quickly? Do they use spamtraps, or user-reports? Or is it just the whim of the list-maintainer? Do they block individual addresses, whole domains, or entire allocations?

> So this random dude causes real problems for legitimate business and individuals and we should just accept it?

So you're having problems sending mail to a domain where the postmaster cares more about rejecting spam than she does about receiving legitimate email. That's a matter for your recipient to take up with their MSP. And if the recipient wants to receive mail from small-time domains, they need to accept that they're going to receive some spam as well; but maybe they need to switch to an MSP that only rejects on strong evidence.

My point is that it's your recipient's choice to use an MSP that blocks using some crazy list they found on github.

Some postmasters will block everything from selected countries; at one time I would block everything from Romania, because none of my users had correspondents in Romania, and email from Romania at that time was 100% spam. But I wasn't providing service to the public. I knew all my users.

Different MTAs have different users, and different patterns of abusive email. So if you want to use a custom blocklist, make your own, based on your own incoming spam (and then you can honour removal requests yourself). Otherwise use a public blocklist, based on multiple spamtraps in multiple ISPs.

So yes, you should just accept it. You don't have a right to have mail delivered by any MSP you send to; they're private organisations or individuals, and they're entitled to determine what their own policies are. In the world of email, nobody is entitled to protection from the foolishness of others.


A bit of background:

Since WW2 Denmark has aligned itself with the US. This has been the consensus since then across all the major parties (Conservatives, Liberals, Social-Liberals and Social-Democratic (with a noteworthy exception[1])).

The stance has during all those years from time to time been challenged by fringe parties like the Communist Party and the far-right Progress Party (who suggested that the Danish defence budget should be cut entirely and replaced with a answering machine saying "we surrender" in Russian).

The Danish populace has not always wanted this "hard alignment". As an example, Denmark would not allow American bases in Denmark (contrary to UK, Germany, etc). But we allowed the Americans to build an Airforce Base at Thule on Greenland (https://en.wikipedia.org/wiki/Thule_Air_Base).

The Social-Democratic prime ministers also communicated publicly, that Denmark would not allow nuclear weapons in peacetime. Yet, it was communicated to the American ambassador in 1960 that Denmark would ignore it, if US had nuclear weapons at Thule (as long as they didn't tell anyone). All was well until 1968 when an American B-52 crashes near Thule with thermonuclear bombs on board. It is worth noting that English wikipedia does not have an account of the incident, but the Danish does: https://da.wikipedia.org/wiki/Thule-sagen_(1968)

Well, the cold war "won" and after 1990s aligned even more with the US. In the late 90s the previously state-owned TeleDanmark company (telephony monopoly) was privatized and sold to the American company Ameritech beginning in 1997.

Around the same time the Americans approached the Danish politicians again. And a deal similar to the nuclear weapons on Greenland was reached: "You're allowed to use our infrastructure to spy on people, but we're not going to make it official". As the same time Denmark was in "the coalition of the willing" sending troops to both Iraq and Afghanistan.

Now, it is worth noting, that this is not a partisan issue within the Danish political elite. We've had Conservative, Liberal and Social-Democratic Ministers of Defence the last twenty years and they have all been briefed about this cooperation. The same goes for their permanent secretaries.

Snowden revealed a lot about this cooperation back in 2015. The "nifty" part from the American perspective is, that they can tell the Danish "We won't spy on Danish people, only foreigners". They then approach Britain and says: "We won't spy on British people, only foreigners". The do the same with Norway, The Netherlands etc. and... well, suddenly they're able to spy on all Europeans. Denmark has a great position for spying because a lot of traffic from Eastern Europe travels through Denmark (and Sweden, but they are not part of NATO). Also, hearsay is that the spying on German Chancellor Merkel was done from Denmark.

Around 2014 the Danish politicians decided to establish "Tilsynet med EfterretningsTjenesterne" (TET) aka. "Supervisory Authority on the Intelligence Agencies" to keep an eye on the intelligence agencies replacing some toothless organisation that previously had the task.

In 2020 TET made a press release: "We cannot get the information we require from the intelligence agencies". The Minister of Defence at this time is Trine Bramsen, who is most known for complaining about nerds being hard to approach and understand for her friends and it is impossible to understand why they all wear white tennis socks (I kid you not: https://www.version2.dk/blog/opraab-til-it-noerderne-smid-te... - use Google translate for a cringe experience).

She is totally clueless.

But that was great in this situation, because as any politician she wants to show how she can solve issues in a resolute manner. So she sends home a bunch of civil servants (including head of the Defence Intelligence Agency, a previous permanent secretary, etc. The top brass). Apparently she didn't get (or understand) the verbal memo about: "Don't ask and don't tell about our cooperation with the Americans".

Like an elephant in a porcelain store.

And retired Ministers of Defence were all gunning at her for "ruining the cooperation with our greatest allies" etc. They, of course, do not want it to be revealed, that they had this information.

Well. Time passes. And just before Christmas it was announced that the matter has been investigated. The public are not allowed to hear, what has been investigated. Or who. But the conclusion is that the intelligence agencies has done nothing wrong. Nothing to see here. Move along.

A couple of days later, the directors (not the editors!) at a couple of major newspapers are called to a meeting with the head of the Police Intelligence Agency and the Defence Military Agency (temp head) where they are politely told: "We just want to let you know, that harming our cooperation with foreign powers carry a 12 year sentence" (it's a very long sentence in Danish terms).

The Police Intelligence Agency has been playing "whack a mole", literally, for some time: Who leaked to TET? Who leaked to the press?

We are currently in a situation, where the state-sponsored national Danish broadcaster (DR) is reporting, that the Police Intelligence Agency (PET) has been surveilling, including wire-tapping, the head of the Defence Intelligence Agency: https://www.dr.dk/nyheder/indland/hemmelig-pet-taskforce-afl... (again, Google translate).

I hope this provides some context. There has since the 1960s been an understanding in the top of Danish society that "The Americans are our friends, we cannot say 'no'.". Even if the Danish population has been kept in the dark. A clueless Minister of Defence by accident kicks the hornet's nest and now somebody must take the fall. But be aware that they're all in on it. No minister (left or right) is innocent and the same goes for the civil servants at the very top.

But it is not all bad! Whereas Germany was earlier our primary trading partner, Denmark nowadays export more to the US than to our neighbouring country. A few dead soldiers and no privacy for your population was totally worth it.

[1] During the 1980s some parts of the Social-Democrats wanted Denmark to re-align. This caused the so-called "footnote politic". Whenever NATO wanted to take some initiative, the Danish foreign minister had to negotiate footnotes saying "Denmark is not part of this and that".


The english Wikipedia seems to have the article of the B52-crash in Thule here: https://en.wikipedia.org/wiki/1968_Thule_Air_Base_B-52_crash


Thanks for the correction! Didn't find it at first.

It supports my assertion that the Danish politicians "indicated" something to the Americans and told the Danish public something else:

" Denmark's nuclear-free zone policy originated in 1957, when the coalition government decided in the lead-up to the Paris NATO summit not to stockpile nuclear weapons on its soil in peacetime.[77][78] The presence of the bomber in Greenland airspace in 1968 therefore triggered public suspicions and accusations that the policy was being violated.

[...]

The report blamed Danish Prime Minister H. C. Hansen for intentionally introducing ambiguity in the Danish–U.S. security agreement: he was not asked about, nor did he mention, the official Danish nuclear policy when meeting with the United States ambassador in 1957 to discuss Thule Air Base. Hansen followed up the discussion with an infamous letter pointing out that the issue of "supplies of munition of a special kind" was not raised during the discussion, but that he had nothing further to add.[87] In doing so, the report concluded, he tacitly gave the United States the go-ahead to store nuclear weapons at Thule.[88]

[...]

The report also confirmed that the United States stockpiled nuclear weapons in Greenland until 1965, contradicting assurances by Danish foreign minister Niels Helveg Petersen that the weapons were in Greenland's airspace, but never on the ground."


Thank you! This was a very enlightening comment, which adds a lot more context to this news story.


So before the tiny Danish nation of just few million people was allied with the US, you were occupied by the Germans, your Jews exported and murdered, many citizens dead.

And the Americans (and English, Canadians etc.) liberated you.

And then for decades, you were up against the Soviet Empire where the Americans provide a pillar of security.

And somehow this relationship with the Americans is bad, exactly how?

You haven't provided any evidence of wrongdoing in terms of cooperation with the Americans.

The US collects intelligence on everyone - so does Germany. And the UK. And ... Denmark. That's normal in 2021.


Arguing that "it's okay to do it because the others do it as well" is kindergarten-level argumentation.

A key factor in a friendly relationship is to be able to tell your friend "no" without him/her getting angry. If one of the people in a relationship is forced to be subservient at all times we normally call it an abusive relationship.

And I think you kinda missed the point: Danish politicians have done everything in their power to please the US since the 1960s and have done so increasingly since Bill Clinton was president. That's fine, if they told the populace that is what they're doing. Instead what they're doing is making hidden agreements with the US, that includes spying on our closest allies and neighbours (https://www.reuters.com/world/europe/us-security-agency-spie...) all the while they tell the Danish people that it is impossible to say if Americans are spying in Denmark.

If it is such a great benefit to Denmark to act as a lap dog for the US, you would think the Danish politicians was proud of it, wouldn't you?


"Arguing that "it's okay to do it because the others do it as well" is kindergarten-level argumentation."

?

Saying "Americans are evil because I heard something on the news and am going to assume a bunch of facts" is 'Kindergarten Arguing'.

...

"A key factor in a friendly relationship is to be able to tell your friend "no" without him/her getting angry. If one of the people in a relationship is forced to be subservient at all times we normally call it an abusive relationship."

This is a glib conflation of pop culture relationship psychology, with realpolitik nature of geopolitical relations.

...

"And I think you kinda missed the point: Danish politicians have done everything in their power to please the US"

I think you 'missed the point' by making broad, fabricated assumptions about a) what exactly Danish politicians are doing, b) the benefits received on either side and c) the materiality of the requests made by the US.

You don't know what was asked for and received from either side, nor the benefits to either party.

...

'Adult Argumentation' is the recognition of the material facts of the situation, of which there are many including the fact that Denmark is small and relatively weak, does not have the scale to work on a lot of defence and intelligence initiatives, it has to partner with 'good neighbours' on a variety of issues, and that Denmark deploys intelligence capabilities, including spying, like every other state.

If Denmark is a 'lapdog' of any state, it's by far and away the lapdog of Germany which de-facto dictates monetary policy (Kroner is issued by DK but is pegged i.e. controlled by ECB), EU level migration, unilaterally makes dumb energy deals with the Russians giving them tremendous leverage and putting everyone at risk, to the point where once again, ironically, the Americans, literally as we speak are having to step in to protect all of you, almost 80 years after WW2 ended. And so many other things.

Thankfully, Danish and other European politicians have developed good relations with the US such that US support on issues such as Ukraine and Russian expansion are going to be well mitigated.

To put that in context, the US is providing a huge layer of security for Denmark, in exchange for what, exactly? For helping the US track down a corrupt politician using surveillance? Seems like a pretty good deal. Who is who's lapdog now?


This is quite silly. On oh so many levels. Your rant about Denmark being the lapdog of EU (and by extension Germany) is hilarious. You might not know it, but there has actually been a number of referendums in Denmark on our association with EU (1972, 1986, 1992, 1993, 2014, 2015).

I don't recall any referendums on the NSA cooperation.

...

On one point you're very right, though: I don't know the details of the deal made between the Danish defence intelligence agency and NSA. I sure would love to (the same goes for the Danish public), so please let me in on the details!

...

You seem unwilling to accept, that the actions performed by politicians is not always in the interest of the people they're supposed to serve. This is quite weird. An US analogy would be, that it is obvious that Pelosi or Trump are more concerned about their private fortunes than the interest of the American public.

And as I said: If the Danish politicians thought this cooperation to be in the best interest of the Danes, they could announce it publicly. "We let NSA tap our data, because they in return sometimes provides tips to us on homegrown terrorists and threats to Danish interests in the Middle-East". It is strange that it is not even possible for them to acknowledge the existence of an agreement. Why all this cloak and dagger when it is so obviously a great benefit for the country as you make it out to be?


They put all of their users eggs in one basket in the cloud. That makes for a very interesting target.

They could have not done that. The users were probably unaware that their data was even placed on the cloud servers of some third party.

Ubiquiti used to be cool. They've taken a nose dive in recent years in several ways: Firmware upgrade suddenly including telemetry by default, forcing people to use their NVR appliance instead of installing their software on their private servers, etc.

Had Ubiquiti not moved people to "cloud solutions" an attacker would have to attack millions of peoples equipment. Now he only had to attack one providers network.


I heard rumors about the telemetry thing, but that is usually an overhyped concern - unless it is sending flow logs or something.

When did they stop allowing people to use a private server for central management? I see Unifi still has a network controller.


Sorry for being obtuse - it wasn't my intention.

I'm thinking of "Unifi Video" that is going out (EOL announced six months ago), where you could either buy their appliance OR download an official .deb package and install the NVR software on your own server.

They replace that with "Unifi Protect" that comes ONLY as an NVR appliance. No more .deb packages. It also requires you to buy one of their other products (Cloud Key 2), IIRC.


Could it be listed "hourly" and you're charged "daily"? Add in VAT (equal to 25% in some countries) and you match the 30 times higher than expected charge.


https://azure.microsoft.com/en-us/pricing/details/sql-databa...

Basic tier, 5 DTUs, 2 GB is listed as ~$4.8971/month or $0.0068/hour on this page. Extra storage would cost more but is not available for the basic tier.


Do you have geo-replication turned on? More regions will be an additional $5/month (plus bandwidth between regions) if you replicate. You can serve everything out of a single region but it is pretty easy to add others if you're not paying attention during initial setup.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: