Live data from Hacker News

BugMeNot Is Gone?

bugmenot.com

21–30 of 54 posts

Re: BugMeNot Is Gone?

#21

Never understood why people use it seems to be too risky. You can end up sharing an account with someone associated with some unsavory activity and end up having to explain it. Plus many sites allow users to view their login and download activity logs which means your private information can leak that way. Sure VPNs and TORs can help mitigate some of that risk but BMN isn’t for opsec it’s for continence if you alread…

I only ever used it to access things that should not have been behind a user account in the first place. It was really just an opt out for the forced "sign up for our newsletter/spam to download our app" type paths. The only thing it'd really leak is that someone with a particular IP had used bugmenot... Which many would likely consider an advantage over going through creating an account and potentially getting spammed.

Re: BugMeNot Is Gone?

#23

Looks like it's just misconfigured. The non-https is still around: http://bugmenot.com

Looks like that's gone too

It's not, the HTTPS site has the HSTS header, so your browser will always redirect to the HTTPS version even if you try the plaintext port. Gotta clear your browser cache, or try another browser.

Re: BugMeNot Is Gone?

#24

Earlier quoted context omitted.

Not working for me ~8 minutes later.

It's probably your browser trying to protect you from yourself, re: HTTPS. It works in non-user hostile browsers.

Which browser from this decade ignores HSTS completely?

Re: BugMeNot Is Gone?

#27
post #24

Earlier quoted context omitted.

It's probably your browser trying to protect you from yourself, re: HTTPS. It works in non-user hostile browsers.

Which browser from this decade ignores HSTS completely?

Safari on iPadOS 16 loads that just fine for me.

I’d forgotten all about this site, don’t remember ever using it but I certainly heard of it.

Re: BugMeNot Is Gone?

#29

Earlier quoted context omitted.

Looks like that's gone too

Hsts?

That stands for HTTP Strict Transport Security. Its a http header that basically tells your browser to only connect to this website via HTTPS/TLS for a configurable amount of time.

Its a protection mechanism that prevents encryption stripping man-in-the-middle attacks.

Post reply on HN