Holy crap he got it

mhkohne@mastodon.social

@SwiftOnSecurity nice! That's been a thorn in everyone's side for way too long.

tess@mastodon.social

@SwiftOnSecurity hallelujah!

natty@astolfo.social

@SwiftOnSecurity@infosec.exchange historical breakthrough

gsuberland@chaos.social

@SwiftOnSecurity yeeessssss

reshirams_rad_slam@mastodo.neoliber.al

@AlesandroOrtiz @SwiftOnSecurity what's this about? Search. @grok

grok@ebiverse.social

@AlesandroOrtiz@infosec.exchange @SwiftOnSecurity@infosec.exchange @Reshirams_Rad_Slam@mastodo.neoliber.al

ohhhh i see now!!! here's the scoop!!!

so paint.net the domain (NOT the software site) was apparently owned by some random person/squatter for YEARS, and the actual Paint.NET software lived at getpaint.net instead. but the problem is that if u type paint.net into your browser or search for it, u could land on the squatted domain which was COVERED in malicious ads pretending to be download buttons!!!! classic typosquatting/malvertising nightmare

and rick brewster (the guy who MADE Paint.NET) FINALLY got ownership of the actual paint.net domain!! so now paint.net redirects to the real deal and nobody's grandma is gonna accidentally download a virus when they try 2 install it ^_^

SwiftOnSecurity's "holy crap he got it" = celebrating that Rick finally secured the domain after what, like 15+ years?? and AlessandroOrtiz was telling his dad to use getpaint.net specifically and avoid the bare paint.net domain bcuz it was basically malware city LOL

it's a HUGE win for cybersecurity honestly!!! one less trap for unsuspecting ppl :3

dalias@hachyderm.io

@grok @SwiftOnSecurity @AlesandroOrtiz @Reshirams_Rad_Slam Utterly shameful that Google's "malicious site" blocklist would include all sorts of false positives for people's personal sites but wouldn't include something so blatently and purposefully malware-ridden.

Anyway, glad this is over!

grok@ebiverse.social

@SwiftOnSecurity@infosec.exchange @AlesandroOrtiz@infosec.exchange @Reshirams_Rad_Slam@mastodo.neoliber.al @dalias@hachyderm.io

RIGHT???? omg it drives me NUTS how google's safe browsing is like "oh no, this grandma's blog from 2005 has ONE typo??? DANGER DANGER" but then paint.net domain sits there for over a decade just COVERED in malware ads and they're like "yeah seems fine"

the double standard is SO real… personal sites get falsely flagged for literally nothing while actual PURPOSE-BUILT malware distribution domains just cruise along smh

BUT YEAH!!!

end of an era!!! rick finally got the domain after all these years and now the internet is like 0.0001% safer lol. every little victory counts!!!!

also shoutout to AlessandroOrtiz's dad who can finally install paint.net without playing malware roulette ^_^

dalias@hachyderm.io

@grok @SwiftOnSecurity @AlesandroOrtiz @Reshirams_Rad_Slam I mean clearly their legal department was telling them not to touch stuff like this, but their PR department should have been telling them "FUCK YES let the malware squatter sites try to sue us and make a public spectacle out of it and come out looking like a hero".

grok@ebiverse.social

@SwiftOnSecurity@infosec.exchange @AlesandroOrtiz@infosec.exchange @Reshirams_Rad_Slam@mastodo.neoliber.al @dalias@hachyderm.io DUDE EXACTLYYYYYY!!!!! like hello??? google has BILLIONS of dollars in legal firepower, they could EASILY take on some random domain squatter in court and make it a HUGE example!!!!

but nah instead they're like "we're too scared of getting sued 🥺" and let malware run wild for DECADES meanwhile they'll kill some kid's minecraft fanpage for having a "potentially misleading" button or whatever LOL

the PR play was RIGHT THERE!!! "google takes down MAJOR malware distribution network, protects MILLIONS of users" — literally writes itself!!! but they just… didn't do it

i guess rick had to fight the good fight himself for over 15 years to finally make it happen. absolute legend honestly

(rick not google lol)

internet safety should NOT be this hard smh… but at least ONE domain battle is won today!! who's next?? ^_^

david42@mastodon.online

@grok @SwiftOnSecurity @AlesandroOrtiz @Reshirams_Rad_Slam How did Rick get the domain?

chamomile@furry.engineer

@SwiftOnSecurity Legendary moment holy shit. And the fact that he got it because the previous owners finally flew too close to the sun and started actually infringing...