Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by applecrazy | Hacker News Reader

Parent Full thread

applecrazy·

Yes. This is what I just discovered. OP here's the malicious github account, so we can get it banned:

https://github.com/OnyonCapitaly

I found a repo with your domain:

https://github.com/OnyonCapitaly/confidencetoexplore.com

edit: just reported them, but you should too OP.

View on HN

Aaaand it’s down! Good job Github and everyone who helped.

Hope this helped, OP

The script kiddie will just signup for another account and "hack" the same sites again.

At least now they have to go through that effort again

Does GitLab have this issue? Don't they offer all this for free, unlike GitHub?

I don't know if they handle this case better specifically, but I found almost all GitLab page functionality is better than GitHub - plus it's more generic, you can wire any static page generator into the built-in CI/CD, not just limited to jekyll or doing it yourself.

GitLab requires you to put a txt record with a verification code in your custom private domain DNS to verify ownership.

TL;DR no, GitLab does not have that issue.

Confirming the previous poster's comment on GitLab Pages domain ownership verification functionality, which was rolled out in February of 2018. https://about.gitlab.com/2018/02/05/gitlab-pages-custom-doma...

Thank you! This is nuts that this can happen and someone would do such a thing. Stupid.

You are awesome. Good work!

Thanks! This is the first time I've done this kind of internet sleuthing. It's a fun experience.

Reported too...

Thank you!

Reply on news.ycombinator.com