A Gov.uk site dedicated to porn?
41–50 of 93 posts
Re: A Gov.uk site dedicated to porn?
#42Re: A Gov.uk site dedicated to porn?
#43Earlier quoted context omitted.
In fact, it's a t.co link that redirects to a bit.ly link that redirects to the actual site!
This is probably just someone who copied the link from twitter straight into the governments content management system. The content on this page isn't written by tech people - it's written by policy experts and other civil servants whose expertise isn't exactly how URL's work...
It doesn't just take a lack of expertise: it takes an extra level of apathy about the quality of your work and general incuriousness about the world. They can see the url they're pasting, and the majority of web users have some intuitive sense of the difference between domains: they are, after all, human-readable.
I can imagine the tail of "confused grandparent" stereotypes that are completely blind to the difference between t.co/622ahdvdj and charts.tf.uk.gov, but people that are that technically illiterate should be nowhere near computers in a professional context.
Re: A Gov.uk site dedicated to porn?
#44> This site is hosted on a Raspberry Pi 4B in the author's living room (behind the couch). Holding up quite well despite HN frontpage. I love what a bit of caching can do. EDIT: appears I jinxed it. I get the allure of hosting something in your home, but these days when you can get a decent VPS for $10/yr it doesn’t really make sense.
Sorry for the ot, but do you have any recommendation for $10 vps?
Re: A Gov.uk site dedicated to porn?
#45Re: A Gov.uk site dedicated to porn?
#46Earlier quoted context omitted.
The thing where IP 10.20.30.40‡ is in the DNS for thing.mycorp.example and later nobody cares about thing.mycorp.example and they give up control without removing the DNS entry - is why you can't get Let's Encrypt certificates by just running a HTTPS web server and you need either plain HTTP, a custom TLS server (it can also do HTTPS but it needs to know about ACME as well) or else DNS. Lots of bulk hosts will let yo…
> ‡ 10.20.30.40 isn't a real public address it's just for example purposes here There’s an RFC for that :) https://datatracker.ietf.org/doc/html/rfc5737
Re: A Gov.uk site dedicated to porn?
#47That's not a very fair assessment. The same way as it's difficult to find British dishes better than, say, minced beef and onion pie, it's challenging to find authentically British porn that's better than this govermnent office provides its people. We should commend the Tory government for its dedication.
Re: A Gov.uk site dedicated to porn?
#48Re: A Gov.uk site dedicated to porn?
#49Re: A Gov.uk site dedicated to porn?
#50Earlier quoted context omitted.
What sometimes happens is someone points a CNAME to a non-existent bucket. Either because they were planning ahead, or someone typo'd a bucket (and thus DNS) name. There are bots that scan for this. Then someone creates the bucket on S3 and boom, subdomain hijack.
That's what I suggested with >> Scan the entire internet for domains pointing to s3-website, and check AWS API to see if it's available? What I wonder is how do you scan all the DNS records with their subdomains? Unlike IPv4 address space, which is very decidedly finite and not-too-big, the space of all the subdomains is basically infinite. Other than using AXFR (zone-transfer DNS request) which is usually restricted…
AXFR makes it a lot easier though.