2

I was checking out this answer today, when I clicked the link given, Firefox reported an untrusted site, so I left the OP a comment "Firefox says the link you provided is untrusted" and the OP replied "Yes, because it is a hacking program called ufonet, it uses botnet to DDoS you target server"

Now I am no expert on hacking but this seems pretty dodgy too me (and Firefox), even more so when you consider that the questioner asked "Is it possible to create UI for Ubuntu with HTML & CSS?" and has been presented with a DDoS hacking tool as the solution.

I am sure this kind of software must be frowned upon here, but I am no expert on this type of software, and so, could be wrong about this..

So have I misunderstood the purpose of the software or should I flag this for close?

4

TL;DR: This probably was on-topic, it's just a poor example without enough detail.


Firefox doesn't report it as "an untrusted site", it reports an "untrusted connection" because the SSL certificate provided, was issued for another domain. Here's the technical explanation Firefox gives (I've subbed the domains involved):

CCCC.BBBB.net uses an invalid security certificate.

The certificate is only valid for the following names:
  lists.AAAA.net, AAAA.net  

(Error code: ssl_error_bad_cert_domain)

This is a significant distinction to make. An untrusted site suggests there is malware, an untrusted certificate suggests admin incompetence (and/or a recent change in domain, plus some incompetence), or it's on a server that also serves AAAA.net and BBBB.net has no SSL certificate. This is a quirk of sharing a single IP between multiple domains.

The link works fine over http, without encryption.


But on the broader question, many of the tools you'd consider wholly illegal, even those which were written for illegal purposes (eg DDoSing sites for fun), have legitimate and legal uses too. Usually for the testing of networks, applications, security, etc. Simply put, hackers, security professionals and even just security conscious developers all rely on the same tools and techniques.

In that vein, I'd be against deleting something just because it could be used illegally. Almost every element of Ubuntu falls into that gaping chasm, including things you rely on to stay safe.

Even so, you're not wrong to question this answer. If you ever feel uncomfortable about something, raising a flag, or chatting it through on here or Chat is probably the best way forward.

And here, as Rinz says, it's a completely off-topic answer to the point of looking spammy. It may have just been mis-posted to the wrong open tab. I think we've all done that at some point.

HOLD THE PRESS! The answer is on-topic!

The question is asking how to create a user interface in HTML+CSS. The answer is showing an application that runs locally and provides an interface to be run in a browser window (hence the 127.0.0.1 in the address bar).

This is a slightly convoluted way to manage this and the answer doesn't so much tell you how you'd do this, and there are probably examples that don't involve using a tool suited for DDoSing... But it's a poke in the right direction.

3

The answer is off topic so should be (and has been) deleted. I would have considered reporting it as spam as it contains a link and does not even attempt to answer the question.

I am sure this kind of software must be frowned upon here, but I am know expert on this type of software, ans so, could be wrong about this..

If there is a question that is on topic on AskUbuntu I believe we should answer it (possibly with a big fat warning). For instance: a question about how to install and use a keylogger on Ubuntu can be valid (since there is a keylogger program in the repositories). There are valid reasons to install a keylogger.

With the same argument I can defend ddoss'ing: if I want to test MY servers I might need the help from experts to help me set this up.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .