Hacker News new | ask | show | jobs
by hrrsn 1275 days ago
Fraudulent ecommerce orders are the only time I've seen tutanota addresses in the wild.
4 comments

I have two colleagues who regularly send me emails from that domain. For the first , I assumed it was her own domain. When I saw messages from a second person I assumed they might both work for the same company. Now I figured it's an ISP. I checked it out and it looks like a good, legit service for people who don't want creeps and advertisers grubbing through their messages. Three UK have no place blocking traffic from legitimate users and must identify problematic use on a per case basis.

Modern legal systems usually limit criminal liability to individuals [1]. Companies engaging in acts of collective punishment (That goes for you too Cloudflare) should at least try to raise their ethical standards to those expected by International Law.

https://en.wikipedia.org/wiki/Collective_punishment

> Now I figured it's an ISP.

It's not an ISP, it's an email provider.

> Modern legal systems usually limit criminal liability to individuals [1]. Companies engaging in acts of collective punishment (That goes for you too Cloudflare) should at least try to raise their ethical standards to those expected by International Law.

There is no "criminal liability", and blocking malfeasants on the internet has always been a heuristic fight. If a service originates an extremely high rate of fraud versus legitimate uses, it's a good heuristic for fraud. It's a shame for legitimate users, but it's also how it's always worked.

And more generally minor (or self-hosted) MTA have always had that issue, it's not news that they get delivered less reliably than big "trusted" mail hosts, and that they can get blacklisted real fast.

Just because it's not "criminal" doesn't mean they're not dicks. And "if you want to make an omelet you gotta break eggs" is neither a reason nor an excuse. It's a sob story you tell yourself to feel better about not being smart enough to figure out a solution that doesn't harm others.
Totally, especially that CloudFlare wall of harrassment... It is a form of harassment, and it needs to be recognised as such!
I don't think it's "harassment".

It's a wall of incompetence.

Cloudflare are just technically not able to deliver what they pretend to. They profess to offer protection for vulnerable users of the internet who are service providers. In doing so they harm millions of other vulnerable users who are clients. They rob Peter to pay Paul, and then take a moral stand on Free Speech.

Free Speech is a two sided affair. The freedom to write/speak must be matched by the freedom to read/listen.

Cloudflare trample all over the latter and act like it's nothing... because "if you wanna make an omelet you gotta break some eggs". They simply kick the can down the road and so are hypocritical and grandiose.

Yeah... any e-commerce system with significant volume's likely to end up with a deny-list for basically all these sorts of services. You lose one real order for every 1,000 fraud attempts, at worst. Easily worth it.

Similar reason lots of US servers used to (? still do ?) block entire IP blocks representing large parts of Asia. If 1% of your legit traffic is coming from those blocks, but 95+% of abuse, brute-force, and exploit attempts, it's a no-brainer to just blackhole them, unless you're at such a huge scale that 1% of legit traffic is still a very large number in absolute terms.

then it should be up to your company to say "hey we don't allow emails from X" and not do business with them. Like someone said in a previous thread "ISPs shoudl be dumb pipes", otherwise they get a nanny complex. Credit cards seem to be doing the same thing these days, acting like nannies.
>Credit cards seem to be doing the same thing these days

Credit card companies have been doing this since day 1

not really, only for illegal and particularly reprehensible/gray areas. Porn is an accepted expression of freedom of speech and is protected speech. Visa/MC/Amex don't need to be the police.
This is 100% my experience.