Small static websites are effectively free (Cloudflare, GCP free tier, etc)..
replyDomains aren’t
replySure, but domains aren't going to be more than $10 or $20 for the year they're relevant.
reply\o/
reply1. See a vuln domain reported, clone the site. 2. Wait for it to expire and snag it. 3. Republish the site with malware 4. Watch people dither about domain names and stuff instead of taking time to fix things.
Sure they are. The domain you want isn't.
replyGitHub.io domains, workers.dev domains, etc are all free domains.
Clever use and abuse of some startups can get you a free domain with a signup package that you can subsequently transfer out, but those are harder to find these days.
Seriously, the bad guys figure this out all the time.
This has been the case for more than a decade, Heartbleed was probably the one which really created the trend.
replydeleted
replyI'm certainly not complaining about some selfless guy making a helpful website without expecting anything in return!
replyThey excpect fame and may make things look worse than they are
replyHow, exactly, are they making "things look worse than they are"? By.... showing what the issue is?
replyNot particularly referencing to this link, but usually severity is made more severe than it actually is. One kind of sensationalism is usually used.
replyNo, they aren't. The website doesn't list an author, so fame is out of the question, and they say exactly how severe the bug is rated ("Rated 9.2 Critical (CVSS 4.0) by GitHub, High by Node.js.") right at the top.
replyThere is named entity in the end, and "we" statement. But yeah, I was speaking in general, not so specifically about this page. It is better than most who do this.
replyAre you asking why do we name things? In a programming forum?
replyListen. There are TWO problems, okay‽
replydeleted
replyIt is annoying (and ironic) because larger companies, that will benefit from this information the most, blocks newly registered domains.
reply