Live data from Hacker News

Someone forgot to renew NodeJS.org

nodejs.org

51–60 of 78 posts

Re: Someone forgot to renew NodeJS.org

#51

Earlier quoted context omitted.

Homebrew, rbenv, rvm, to name a few. Never understood it either. If you could get ahold of a domain write a malicious script at /some-script.sh, you could do a lot of damage.

I agree that it feels insecure, but is there really a difference between this and downloading and running files from a .tar.gz or installing a .deb for example?

debs are authenticated.

Re: Someone forgot to renew NodeJS.org

#53

Earlier quoted context omitted.

Homebrew, rbenv, rvm, to name a few. Never understood it either. If you could get ahold of a domain write a malicious script at /some-script.sh, you could do a lot of damage.

I agree that it feels insecure, but is there really a difference between this and downloading and running files from a .tar.gz or installing a .deb for example?

Yes.

apt-get:

  $ ls -l /etc/apt/trusted.gpg.d/

Source Installation:

  $ wget http://nmap.org/dist/sigs/nmap-6.01.tgz.asc
  $ wget http://nmap.org/dist/nmap-6.01.tgz
  $ gpg nmap-6.01.tgz.asc

Re: Someone forgot to renew NodeJS.org

#54
post #8

I don't understand. It looks normal and works for me?

Wait half an hour or so, and flush your computer's DNS cache. Your ISP is probably caching the DNS entry.

It's been fixed. So it might be YOU who now have the old, bad DNS entry cached.

  Domain Name:NODEJS.ORG
  Created On:29-Sep-2009 14:50:55 UTC
  Last Updated On:29-Sep-2012 16:27:30 UTC
  Expiration Date:29-Sep-2013 14:50:55 UTC

Re: Someone forgot to renew NodeJS.org

#55
post #30

Earlier quoted context omitted.

Shouldn't be anything to worry about - here’s how the domain expiry process works. 1. Domain ‘expires’, and enters a 40 day grace period. I have read things that imply this can vary from registrar to registrar, but it seems pretty standard from what I have seen. 2. After the grace period, it enters a 30 day redemption period. Again, apparently this can vary, but I have yet to see it (admittedly I have only looked at…

Your numbers are off. Grace period (as you have pointed out somewhat) varies by registrar. The basis for what you are saying is how long a registrar has to delete the domain before they can get their money refunded. That time period is 45 days. So on the expiration date the registrar is automatically charged for the renewal. If they delete on day 45 (by a certain time depending on when registered) they will have thei…

You start by saying my numbers are off, then agree about the variability of the grace period before stating exactly the same numbers as I did?

Thanks for clearing up the redemption period invariability though.

Re: Someone forgot to renew NodeJS.org

#56
post #53

Earlier quoted context omitted.

I agree that it feels insecure, but is there really a difference between this and downloading and running files from a .tar.gz or installing a .deb for example?

Yes. apt-get: $ ls -l /etc/apt/trusted.gpg.d/ Source Installation: $ wget http://nmap.org/dist/sigs/nmap-6.01.tgz.asc $ wget http://nmap.org/dist/nmap-6.01.tgz $ gpg nmap-6.01.tgz.asc

The point is that most people don't do this.

Re: Someone forgot to renew NodeJS.org

#57
post #53

Earlier quoted context omitted.

I agree that it feels insecure, but is there really a difference between this and downloading and running files from a .tar.gz or installing a .deb for example?

Yes. apt-get: $ ls -l /etc/apt/trusted.gpg.d/ Source Installation: $ wget http://nmap.org/dist/sigs/nmap-6.01.tgz.asc $ wget http://nmap.org/dist/nmap-6.01.tgz $ gpg nmap-6.01.tgz.asc

This is an important part of why Debian and its derivatives are superior to OS X for web development. If you like Mac hardware like I do, at least run a Linux distro as a virtual machine and save yourself the trouble of Homebrew or its contemporaries.

Re: Someone forgot to renew NodeJS.org

#58
Sorry, folks. My bad.

The root cause here is that some stuff didn't get handed over properly in the switch from Ryan to me as Node.js manager. So, the emails were indeed going to a non-functioning inbox.

It's resolved now, and we're setting it up to auto-renew so that this doesn't happen again.

Re: Someone forgot to renew NodeJS.org

#59
post #11

Earlier quoted context omitted.

Yes you are correct about that... It happened to me once on an old domain and I was able to get it back in the following week after expiration but I don't recall seeing a parked page during that period of time. Doing a quick Whois for nodejs.org show that the name is expiring today: Domain ID:D157222203-LROR Domain Name:NODEJS.ORG Created On:29-Sep-2009 14:50:55 UTC Last Updated On:20-Sep-2011 00:04:23 UTC Expiration…

eNom does all kinds of shady shenanigans with domain renewals. There are stories of names going up on their auction block the moment the registration expires (meaning someone has to pay a greatly inflated amount of cash to reclaim the name)

Unlikely. As much as enom sucks I don't think one could misconstrue any of their ineptitude as evil. They do however have the redemption period at inflated prices, but I've never heard of them moving an expired domain to immediate auction.

[citation please]

Re: Someone forgot to renew NodeJS.org

#60
There is a lot of self-righteous dickishness and schadenfraude in these responses. Proclaiming there to be "NO excuse" to someone who has worked their ass off to create a stellar open-source project really says more about yourself than the person you are attacking.

Most certainly there is some sort of explanation, and whether or not it was a terrible mistake, being a jerk about it doesn't relieve you from the terrible mistakes you've made in your past - we all have them. And in the end, this is really not a big deal.

Post reply on HN