remram • 4 days ago

I don't see how. This is a direct link to the author's bluesky server (PDS) so of course it is controlled by them.

3
nicky0 • 3 days ago

The link in question (linked from the the sumbitted link) is `porcini.us-east.host.bsky.network`. That's hosted by bsky, isn't it?

benatkin • 4 days ago

Lack of moderation combined with an offical-sounding domain name.

This would have to get the user to follow a link or call a phone number or something though. These are plausible. It's too bad the content-security-policy can't prevent following links.

2 replies
extraduder_ire • 4 days ago

Bluesky seems to use a lot of totally different domain names for each part of their infrastructure, maybe for this reason. e.g. this one is bsky.network

While they're nowhere close on volume, they're certainly beating microsoft in terms of the rate they're adding similar looking official URLs.

1 reply
whywhywhywhy • 3 days ago

> bsky.network

Shortening your brand to 4 letters when your chosen TLD is the same length as your full brand name is such a weird choice.

3 replies
extraduder_ire • 2 days ago

I think the linked blogpost is the first time I've seen that URL used anywhere user-facing. (other than the status page) bsky.<TLD> is already used for other user-facing URLs though.

wise_young_man • 3 days ago

I guess bsky.net and bluesky.net were taken. What’s weird is why ICANN allowed .network TLD at all when .net already existed, was shorter, and meant for that.

1 reply
Symbiote • 3 days ago

I can't be the only person who visited bluesky.com, assuming that was the thing everyone was talking about.

tomrod • 3 days ago

This is why you and I aren't in charge of marketing I reckon.

anon7000 • 4 days ago

I mean, the way AT Proto is designed, moderation primarily happens on the app layer, not the protocol layer. So on an app like Bluesky, you can have a lot of moderation. But the protocol itself allows hosting arbitrary content in a distributed/decentralized way.

ndjdjddjsjj • 4 days ago

Phish could be this:

$inane_marketing_trope

...

Click here to Unsubscribe from Bluesky

https://porcini.us-east.host.bsky.network/xrpc/com.atproto.s...

...

Redirects to bad site.

1 reply
remram • 4 days ago

As long as content is authored by the administrator of the server, I don't see where there is a security issue.

It's like if you point to your own Apache server in your own domain where you host a scam page and say there's a security issue with Apache because you could do that.

Or are you saying that you can make this person's server serve third-party content?

1 reply
ndjdjddjsjj • 3 days ago

> Or are you saying that you can make this person's server serve third-party content?

Http: yes see OP

Email: not sure. Hopefully not. But spoofing happens.