search

bcnfs / bcnfs.github.io

Barcelona Free Software's site
https://bcnfs.org
MIT License
4 stars 3 forks source link

Subdomain Takeover #43

Closed JoeMilian closed 3 years ago

JoeMilian commented 3 years ago

Hey,

I noticed you had an unclaimed GitHub page, I took it over so no attacker is able to use it.

The subdomain: https://las2019.bcnfs.org/

Github suggests the following: "We strongly recommend not using wildcard DNS records, such as *.example.com. A wildcard DNS record will allow anyone to host a site at one of your subdomains."

I hope I have informed you enough, If there are any issues please don't hesitate to message me.

Kind regards,

Joe (https://twitter.com/JoeMilian1)

tsdgeos commented 3 years ago

Hi Joe,

thanks for the heads up!

We think we have fixed the configuration so that this can not happen anymore, but we would be very happy if you can have a second look just in case :)

Thanks again for the notifcation!