A Gov.uk site dedicated to porn? • Hacker News Board

Re: A Gov.uk site dedicated to porn?

#91

Post by iso1631 » Fri, Nov 26, 2021, 4:00 PM UTC

qeternity wrote: post #57

iso1631 wrote: post #48

Earlier quoted context omitted.

$5 a year?

$5/mo - but there are plenty of decent VPS for $5/yr - the catch is they will be IPv6 only for port 80 so you chuck it behind Cloudflare (carrying static load as well). The low end world will shock anyone who has only ever seen AWS pricing.

Quite, and the $40-60 a year bracket for a VPS is quite normal, but the original message was "decent VPS for $10/yr". Linode certainly doesn't go that low - at least last time I checked.

I saw an VPS from Italy I think for in the region of $20/year some time back, Sephiroth87 was after a $10/year VPS recommendation, not a $60/year one that hvgk suggested.

Re: A Gov.uk site dedicated to porn?

#92

Post by dwild » Fri, Nov 26, 2021, 4:46 PM UTC

bigiain wrote: post #78

qeternity wrote: post #69

Earlier quoted context omitted.

> After 6 months your Rpi4 will be costing less than the VPS. No, $10 per year, not per month. That means the rPi payback is 5-6 years, and for inferior hardware and bandwidth.

You and I clearly have different expectations for "a decent VPS"... (I have a "One time cost access forever!" VPS, which varies me $9/year "maintenance fees", which I'm happy enough with for the money, but it's definitely "Useful for the price" rather than "decent".)

CloudAtCost is not a good reference for cheap VPS, they were never cheap and that maintenance fee make it even worse. Their performance is abysmal too, but that could have changed since the time I used them.

If you want some good cheap VPS, go check on https://www.lowendtalk.com/ you will find plenty of good ones there. I would suggest to pay a bit more and go with BuyVM, at 20$ per year for their 512 MB offering, but you could definitely get some cheaper just as good somewhere else.

Re: A Gov.uk site dedicated to porn?

#93

Post by mh- » Sun, Nov 28, 2021, 8:47 PM UTC

necovek wrote: post #37

mh- wrote: post #26

Earlier quoted context omitted.

What sometimes happens is someone points a CNAME to a non-existent bucket. Either because they were planning ahead, or someone typo'd a bucket (and thus DNS) name. There are bots that scan for this. Then someone creates the bucket on S3 and boom, subdomain hijack.

That's what I suggested with >> Scan the entire internet for domains pointing to s3-website, and check AWS API to see if it's available? What I wonder is how do you scan all the DNS records with their subdomains? Unlike IPv4 address space, which is very decidedly finite and not-too-big, the space of all the subdomains is basically infinite. Other than using AXFR (zone-transfer DNS request) which is usually restricted…

Watching feeds of Certificate Transparency logs, and optionally going beyond those hostnames by using the newly discovered names to find additional ones, is one approach.

Google hosts a page [0] to search them, but there are other services/APIs that let you consume them in realtime - seeing certificate issuance live.

If you wanted to consume them programmatically without a 3rd party service, everything you need is in this repo [1].

0: https://transparencyreport.google.com/https/certificates

1: https://github.com/google/certificate-transparency-community...