Has Craigslist been hacked?

craiglist.org

14 points·mikecarroll··12 comments

Removed the link to Craigslist.org so that people wouldn't accidentally click through to a site (we've now verified) is hacked.

Open articleView on HN

Repeat after me:

I won't link to sites i suspect being compromised. I won't link to sites i suspect being compromised. I won't link to sites i suspect being compromised. I won't link to sites i suspect being compromised. ...

I saw this, too. If you can get a little deeper into cl, ex. boston.cragislist.org/i/apartments or boston.craigslist.org/search/aap, you get a Microsoft Frontpage site with the title "digital gangster for life".

It's struggling to load though -- I don't think the hacker was anywhere near ready for Craigslist levels of traffic.

Looks like it is redirecting to "digitalgangster(dot)com) -- Also, DNS shows registrant as "Registrant Name: Steven wynhoff @LulzClerk"

http://craigslist.com also doesn't work. Wow this is trouble for sure.

Please change the link to this discussion rather than linking directly to a server that seems to be compromised.

Maybe somebody hijacked their DNS?

A whois on craigslist.org shows that it was updated today.

I have a feeling the lesson at the end of this is going to involve setting longer TTLs.

That's a tough one, because in the event of a hijacked domain like this, a lower TTL would also force the "good" settings back faster.

Yup, hacked.

Reply on news.ycombinator.com