TechTakes

1489 readers

29 users here now

Big brain tech dude got yet another clueless take over at HackerNews etc? Here's the place to vent. Orange site, VC foolishness, all welcome.

This is not debate club. Unless it’s amusing debate.

For actually-good tech, you want our NotAwfulTech community

founded 2 years ago

MODERATORS

dgerard@awful.systems

Itch․io taken down by bogus AI-sourced phishing claim from Funko Pop, BrandShield (pivot-to-ai.com)

submitted 2 weeks ago by dgerard@awful.systems to c/techtakes@awful.systems

15 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] JonsJava@lemmy.world 9 points 2 weeks ago (2 children)

Domain registrars can't, as they don't manage pages - just domains.

Only domain admins (and possibly hosting companies, depending on architecture) can manage at a page level.

[–] sc_griffith@awful.systems 6 points 2 weeks ago (2 children)

I see. so "we only sent the registrar a report about one page" is total bullshit

[–] sailor_sega_saturn@awful.systems 10 points 2 weeks ago* (last edited 2 weeks ago)

Also this wasn't necessarily a DMCA request.

itch.io said this on the hackernews thread (bolding mine):

The BrandShield software is probably instructed to eradicate all "unauthorized" use of their trademark, so they sent reports independently to our host and registrar claiming there was "fraud and phishing" going on, likely to cause escalation instead of doing the expected DMCA/cease-and-desist.

And BrandShield's response / nonpology (bolding mine):

BrandShield serves as a trusted partner to many global brands. Our AI-driven platform detects potential threats and provides analysis; then our team of Cybersecurity Threat hunters and IP lawyers decide on what actions should be taken. In this case, an abuse was identified from the itch.io subdomain. BrandShield remains committed to supporting our clients by identifying potential digital threats and infringements and we encourage platforms to implement stronger self-regulation systems that prevent such issues from occurring.

Which translated into English is possibly* something like "We would be very happy if the general public thought this was a normal DMCA takedown. Our chatbot said the website was a phishing page. Our ~~overworked~~ cybersecurity ~~expert~~ hunter agreed ~~after looking at it for zero milliseconds~~. We encourage itch.io to get wrecked."

This difference matters because site hosts and domain registrars can be extremely proactive about any possibility of fraud / abuse / hacks, and there's less of a standard legal process for them.

* Dear Funko please do not call my mom.

[–] JonsJava@lemmy.world 5 points 2 weeks ago

Yes and no.

Usually, you send the DMCA/Takedown request to the site.

If they don't have a DMCA contact, or you're lazy, you send it to the domain registrar.

[–] froztbyte@awful.systems 1 points 2 weeks ago

they can, by withdrawing/unpublishing the domain presence from the registry for that zone. this is how expiries work