Never understood why people use it seems to be too risky. You can end up sharing an account with someone associated with some unsavory activity and end up having to explain it. Plus many sites allow users to view their login and download activity logs which means your private information can leak that way. Sure VPNs and TORs can help mitigate some of that risk but BMN isn’t for opsec it’s for continence if you alread…
BugMeNot Is Gone?
21–30 of 54 posts
I only ever used it to access things that should not have been behind a user account in the first place. It was really just an opt out for the forced "sign up for our newsletter/spam to download our app" type paths. The only thing it'd really leak is that someone with a particular IP had used bugmenot... Which many would likely consider an advantage over going through creating an account and potentially getting spammed.
Re: BugMeNot Is Gone?
#22Re: BugMeNot Is Gone?
#23Looks like it's just misconfigured. The non-https is still around: http://bugmenot.com
Looks like that's gone too
It's not, the HTTPS site has the HSTS header, so your browser will always redirect to the HTTPS version even if you try the plaintext port. Gotta clear your browser cache, or try another browser.
Re: BugMeNot Is Gone?
#24Re: BugMeNot Is Gone?
#25Didn’t work in recent times anyway.
Re: BugMeNot Is Gone?
#26Earlier quoted context omitted.
Looks like that's gone too
Hsts?
https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security
Trying from another browser works
Re: BugMeNot Is Gone?
#27Earlier quoted context omitted.
It's probably your browser trying to protect you from yourself, re: HTTPS. It works in non-user hostile browsers.
Which browser from this decade ignores HSTS completely?
Safari on iPadOS 16 loads that just fine for me.
I’d forgotten all about this site, don’t remember ever using it but I certainly heard of it.
Re: BugMeNot Is Gone?
#28Re: BugMeNot Is Gone?
#29Earlier quoted context omitted.
Looks like that's gone too
Hsts?
That stands for HTTP Strict Transport Security. Its a http header that basically tells your browser to only connect to this website via HTTPS/TLS for a configurable amount of time.
Its a protection mechanism that prevents encryption stripping man-in-the-middle attacks.