Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

remove dangling cnames & netlify/github takeovers #1514

Open
wants to merge 3 commits into
base: main
Choose a base branch
from

Conversation

24c02
Copy link
Member

@24c02 24c02 commented Jan 27, 2025

ahoy dns fellas!
every so often i get an email along the lines of these from various skids running nucleus scans and then hitting security.txt emails in the hopes of getting a free bug bounty:
CleanShot 2025-01-27 at 12 57 18@2x
my internal response is "who cares, pick up a foot ball", but it's annoying, so i took a pass and pruned a bunch of them.
these are all either pointing to things that don't exist anymore or hello world pages from a while ago.

additionally, these people seem to have valid websites getting cnamed to but don't work for some reason? they should probably either remove them or fix:

  • busan.hackclub.com
  • malagon.hackclub.com
  • ntp.hackclub.com
  • stemsharkya.hackclub.com
  • vikingsdev.hackclub.com
  • webstergroves.hackclub.com

@24c02 24c02 requested review from a team as code owners January 27, 2025 18:05
@alx-alexpark
Copy link
Member

Agree that we should remove these. Haven't manually reviewed all of the domains yet but looks good!

@alx-alexpark
Copy link
Member

For the people who have valid cnames that don't work, I would contact the original author as its probably a misconfiguration on their end.

@24c02
Copy link
Member Author

24c02 commented Jan 28, 2025

re: those i get automated skid emails about them as well and i'd love for that to stop

Copy link
Member

@alx-alexpark alx-alexpark left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm good with both the thingies to be deleted. I haven't checked manually, but I trust that the list you provided is valid.

I would wait until @Muirrum and @grymmy give their thoughts before merging though.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants