Hacker News new | ask | show | jobs
by sodality2 885 days ago
Wow, really surprising that Njal.la is the registrar and suspended zedeus, given they advertise themselves as resilient to government requests (not as trigger-happy when it comes to legal threats as other hosters). Their about page says:

> The idea behind Njalla is to make sure that your visibility to the public is minimised if you need it to be. We're not going to give your customer data out easily. However, we will help if there are legal merits to any formal government requests to our system. If you use our service in a way that affects anyones health or safety, we reserve the right to suspend your service.

Does this mean Twitter gave a very valid legal threat? Or worse, is there some Twitter content that is being mirrored that is unsavory and triggered an immediate suspension from Njalla? This is unfortunately very common for Nitter in particular [0] [1].

[0]: https://github.com/zedeus/nitter/wiki/DMCA-templates [1]: https://github.com/zedeus/nitter/issues/482

4 comments

What's interesting about this is when you use Njalla you give your domain to them. So it seems in worse case they could just keep the domain with no legal recourse too? Given from my understanding nitter is simply a proxy service too this makes it odd.
> Or worse, is there some Twitter content that is being mirrored that is unsavory and triggered an immediate suspension from Njalla?

Since it mirrors all twitter content that seems almost a given.

> given they advertise themselves as resilient to government requests (not as trigger-happy when it comes to legal threats as other hosters)

That does not mean they're ok with illegal things... such as CSAM which was the case here. They're not a bullet proof registrar, they're meant to be private, they're not even a registrar

Of course, but presumably they would look into these requests to investigate for validity. According to the thread, zedeus says the URLs reported are not even valid and don't work.
> zedeus says the URLs reported are not even valid and don't work

I don't see him saying that.

He said

> A funny thing to note here is that the image link, which first points at nitter.it, is a /enc/ link which only gets created by Nitter if the instance admin enables base64 link encoding for media proxying. This is not enabled for nitter.net, so I know for a fact someone copied an image from another instance (presumably nitter.it), changed the domain, and sent a complaint to Njalla.

nitter.net returns images from tweets as something like "/pic/orig/media/DP5UreOXcAEz6EI.jpg"

another instance with "base64 link encoding for media proxying" returns images from tweets as "/pic/enc/bWVkaWEvRFA1VXJlT1hjQUV6NkVJLmpwZw=="

That just means whoever got the link went to another instance first, copied the path and replaced it with nitter.net

I tried this myself, I went to another nitter instance which had "base64 link encoding for media proxying", copied the link, replaced the domain with nitter.net and it loaded the image just fine.

Ah, I stand corrected. Thanks!
They are clearly not resilient. They serve no purpose to the market.