Hacker News Reader

Comment by rkda | Hacker News Reader

Their German Twitter account has more info:

https://twitter.com/Crunchyroll_de/status/926782599460212736

    And for our English-speaking audience
    Please DO NOT access our website at the current time. We 
    are aware of the issues and are working on it

     Update: We have NOT been hacked. At the moment, it appears to be DNS hijacking.

View on HN

> At the moment, it appears to be DNS hijacking.

A google search for "crunchyroll" returns as the first result an HTTP link. Had they used HTTPS, would it have prevented the attack (turning it into a denial-of-service instead), or would the DNS hijack be enough for the attacker to obtain a valid certificate?

Control of DNS is enough to get a domain-validated HTTPS certificate in seconds.

well with HSTS most recurring users wouldn't have noticed it, at least.

Reply on news.ycombinator.com