Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Dreda.org registration lapsed, and has been picked up by a bad actor. #14

Open
MrJoy opened this issue Feb 8, 2024 · 2 comments
Open

Dreda.org registration lapsed, and has been picked up by a bad actor. #14

MrJoy opened this issue Feb 8, 2024 · 2 comments
Assignees
@elmindreda

Comments

@MrJoy
Copy link

MrJoy commented Feb 8, 2024 •
edited by elmindreda
Loading

It appears that in 2021 this domain was registered after having lapsed. Currently, duff.dreda.org seems to direct to malvertising of some sort. ("Your computer is infected with a virus!" type stuff.)
@elmindreda elmindreda self-assigned this Feb 16, 2024
elmindreda added a commit that referenced this issue Feb 16, 2024
@elmindreda
Remove all references to hostile domain
c1baefa 
Related to #14
@elmindreda
Copy link
Owner

Thank you! I forgot to update things here when it expired.

I changed the target URL above too so people won't accidentally end up in a bad place while this gets fully fixed.

@sodul
Copy link

sodul commented Apr 12, 2024 •
edited
Loading

I filed a security report with homebrew because the home for duff is getting the bad redirects.

> brew home -v duff
Opening homepage for Formula duff
/usr/bin/open https://duff.sourceforge.net/

@elmindreda if you still have control over https://sourceforge.net/projects/duff/ you might want to update it so that https://duff.sourceforge.net/ and https://duff.sourceforge.io/ will not redirect to the malicious domain.

iMichka added a commit to iMichka/homebrew-core that referenced this issue Apr 14, 2024
@iMichka
duff: update home url
dcd8964 
The current url redirects to a domain name that is not under upstream's control anymore.
See elmindreda/duff#14
and
elmindreda/duff@c1baefa

We could also use https://sourceforge.net/projects/duff as home url,
but given elmindreda/duff#14 (comment),
there is no link from sourceforge to the github project, so using the github
link seems to be a better move for now.
@iMichka iMichka mentioned this issue Apr 14, 2024
Merged
6 tasks
@posch posch mentioned this issue Aug 4, 2024
Merged
13 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@elmindreda elmindreda

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@MrJoy @elmindreda @sodul