9 ms·

Chaijs.com just let their domain expire

46 points by omgmajk 5y ago

dkdbejwi383 5y ago
https://github.com/chaijs/chaijs.github.io/issues/200 https://github.com/chaijs/chaijs.github.io/issues/200 Looks like the owner of the domain is no longer active
omgmajk 5y ago
Screenshot: https://imgur.com/a/U9Wb9Vs https://imgur.com/a/U9Wb9Vs
eCa 5y ago
I wonder how long Github will show the domain as verified[1]. [1] https://github.com/chaijs https://github.com/chaijs
- omneity 5y ago
  I'm keeping track of the verified status in this public sheet: https://docs.google.com/spreadsheets/d/1MrHkvsXJ80zWM5lT92pH3b4Joc8k8alpB4WXgGh25U4/edit?usp=sharing https://docs.google.com/spreadsheets/d/1MrHkvsXJ80zWM5lT92pH... I did it in 3 min with Monitoro[0], a no-code tool I built to track website changes and send data to SaaS tools and apps. [0]: https://monitoro.co https://monitoro.co EDIT: Update, the team has changed the URL in their github account. It doesn't appear as verified for now. I'm still leaving the tracker running for some time. We'll never know how long it would have taken for Github to figure it out...
jordemort 5y ago
For those of you wondering what a "Chaijs" is like I was: https://github.com/chaijs/chai https://github.com/chaijs/chai > BDD / TDD assertion framework for node.js and the browser that can be paired with any testing framework.
andrew_ 5y ago
Chai has unfortunately been left behind by its maintainers. My own personal attempts to contribute were met with silence and oddly-placed resistance (when I was able to get a response). It's been my opinion for a few years that Chai is obsolete tech, but it's still prolifically used in a lot of packages/libraries/etc that are in maintenance mode. There are just a lot of better alternatives now.
- o_____________o 5y ago
  What alternatives do you like?
  - horsawlarway 5y ago
    Jest. The matchers cover basically all the same use cases. Not to mention that jest's "expect.arrayContaining" and "expect.objectContaining" literally blow most other assertion libraries out of the water.
    - sombremesa 5y ago
      I don't know what kind of shop you're running where JS libraries are 'literally' getting blown out of water but I like it.
      - grumple 5y ago
        It would not surprise me if there's javascript running on nuclear subs. It's already made it to space: https://www.infoq.com/news/2020/06/javascript-spacex-dragon/ https://www.infoq.com/news/2020/06/javascript-spacex-dragon/
        semi-extrinsic 5y ago
        In the trivial sense, sure, someone probably has a web browser on a nuclear sub. But if you're talking software written for the operation of the sub itself, I expect it's either Ada, C89 or C++. Ada was, after all, developed specifically by the DoD for exactly such purposes.
petercooper 5y ago
It appears to still be in a state where they could renew it and have it put back, though.
- omgmajk 5y ago
  Hopefully, I enjoy chaijs and it's very comfy to use in postman.
Keithamus 5y ago
Hi, I'm the current lead maintainer of Chai. We don't own the domain name, the previous maintainer/author does. It seems to have lapsed. There's not much I can do about that other than attempt to contact the previous maintainer, which I've done.
- omgmajk 5y ago
  Much love. I like chai a lot. Thanks for your work.
- TAForObvReasons 5y ago
  The subdomain chai.js.org is available and it may be worth investigating that as an alternative. (https://js.org/ https://js.org/ has more details)
- bhartzer 5y ago
  I am not sure if you know, but domain registrars have a policy that allows the organization or company to be able to get ahold of the domain. For example, if the domain is registered under a former employee and you cannot get ahold of that employee, the organization or company can fill out a form provided by the registrar to gain access to the domain. This would certainly apply to you, and you should be able to get ahold of the domain name (and renew it). You will need to provide certain documents in order to prove that your organization should have access to the domain. What is required depends on the registrar. Also, I would contact the domain registrar and tell them that you'd like to pay for the renewal (so they will change the name servers back to your previous name servers) while the details are worked out about domain ownership. If you have any trouble with ANY of this, get in touch and I will help you get it taken care of, you should be able to find me via a search for my user id.
- ghayes 5y ago
  Since you're here, and the online docs are currently missing, do you know the best way to a stacktrace from a failed Chai assertion? Basically, if I do: import chai from 'chai'; chai.config.includeStack = true; try { chai.expect(1).to.equals(2); } catch (e) { console.log(e.stack); } In the REPL, I'm getting `e` as an AssertionError with a trace, but in my running code, the error is coming back as a vanilla object without a stacktrace. Sorry that this is clearly not the right forum for this kind of question.
conradfr 5y ago
This page reminds of the design of a widespread squatted domains page back in the days, with a picture of a girl with a backpack. By Googling I found this [1] that leads to this one [2] Weird nostalgia. [1] https://www.reddit.com/r/pics/comments/7z628/who_the_fuck_is_this_and_why_does_she_show_up_on/ https://www.reddit.com/r/pics/comments/7z628/who_the_fuck_is... [2] https://web.archive.org/web/20160304051326/http://yousuckatwebsites.com/web-trends/the-most-infamous-girl-in-the-history-of-the-internet https://web.archive.org/web/20160304051326/http://yousuckatw...
surajs 5y ago
Try this https://chaijs.github.io/ https://chaijs.github.io/
tqkxzugoaupvwqr 5y ago
Is this a supply chain attack waiting to happen? The new domain owner can “restore” the site to look like the original but host malicious libraries. If @chaijs.com e-mail addresses were used to register accounts, e.g. on GitHub or package registries, anything belonging to these accounts would be tainted as well because its under control of the new domain owner.
Keithamus 5y ago
Just to update everyone: the domain has been renewed and is being transferred over to my account (as the current lead maintainer). We’ll use some funds to ensure it stays active for a long time and this won’t happen again.
- bhartzer 5y ago
  That’s awesome, great to hear.

46 points by omgmajk 5y ago

https://github.com/chaijs/chaijs.github.io/issues/200 https://github.com/chaijs/chaijs.github.io/issues/200 Looks like the owner of the domain is no longer active

omgmajk 5y ago

Screenshot: https://imgur.com/a/U9Wb9Vs https://imgur.com/a/U9Wb9Vs

eCa 5y ago

I wonder how long Github will show the domain as verified[1]. [1] https://github.com/chaijs https://github.com/chaijs

omneity 5y ago
I'm keeping track of the verified status in this public sheet: https://docs.google.com/spreadsheets/d/1MrHkvsXJ80zWM5lT92pH3b4Joc8k8alpB4WXgGh25U4/edit?usp=sharing https://docs.google.com/spreadsheets/d/1MrHkvsXJ80zWM5lT92pH... I did it in 3 min with Monitoro[0], a no-code tool I built to track website changes and send data to SaaS tools and apps. [0]: https://monitoro.co https://monitoro.co EDIT: Update, the team has changed the URL in their github account. It doesn't appear as verified for now. I'm still leaving the tracker running for some time. We'll never know how long it would have taken for Github to figure it out...

jordemort 5y ago

For those of you wondering what a "Chaijs" is like I was: https://github.com/chaijs/chai https://github.com/chaijs/chai > BDD / TDD assertion framework for node.js and the browser that can be paired with any testing framework.

andrew_ 5y ago

Chai has unfortunately been left behind by its maintainers. My own personal attempts to contribute were met with silence and oddly-placed resistance (when I was able to get a response). It's been my opinion for a few years that Chai is obsolete tech, but it's still prolifically used in a lot of packages/libraries/etc that are in maintenance mode. There are just a lot of better alternatives now.

o_____________o 5y ago
What alternatives do you like?
- horsawlarway 5y ago
  Jest. The matchers cover basically all the same use cases. Not to mention that jest's "expect.arrayContaining" and "expect.objectContaining" literally blow most other assertion libraries out of the water.
  - sombremesa 5y ago
    I don't know what kind of shop you're running where JS libraries are 'literally' getting blown out of water but I like it.
    - grumple 5y ago
      It would not surprise me if there's javascript running on nuclear subs. It's already made it to space: https://www.infoq.com/news/2020/06/javascript-spacex-dragon/ https://www.infoq.com/news/2020/06/javascript-spacex-dragon/
      - semi-extrinsic 5y ago
        In the trivial sense, sure, someone probably has a web browser on a nuclear sub. But if you're talking software written for the operation of the sub itself, I expect it's either Ada, C89 or C++. Ada was, after all, developed specifically by the DoD for exactly such purposes.

petercooper 5y ago

It appears to still be in a state where they could renew it and have it put back, though.

omgmajk 5y ago
Hopefully, I enjoy chaijs and it's very comfy to use in postman.

Keithamus 5y ago

Hi, I'm the current lead maintainer of Chai. We don't own the domain name, the previous maintainer/author does. It seems to have lapsed. There's not much I can do about that other than attempt to contact the previous maintainer, which I've done.

omgmajk 5y ago
Much love. I like chai a lot. Thanks for your work.
TAForObvReasons 5y ago
The subdomain chai.js.org is available and it may be worth investigating that as an alternative. (https://js.org/ https://js.org/ has more details)
bhartzer 5y ago
I am not sure if you know, but domain registrars have a policy that allows the organization or company to be able to get ahold of the domain. For example, if the domain is registered under a former employee and you cannot get ahold of that employee, the organization or company can fill out a form provided by the registrar to gain access to the domain. This would certainly apply to you, and you should be able to get ahold of the domain name (and renew it). You will need to provide certain documents in order to prove that your organization should have access to the domain. What is required depends on the registrar. Also, I would contact the domain registrar and tell them that you'd like to pay for the renewal (so they will change the name servers back to your previous name servers) while the details are worked out about domain ownership. If you have any trouble with ANY of this, get in touch and I will help you get it taken care of, you should be able to find me via a search for my user id.
ghayes 5y ago
Since you're here, and the online docs are currently missing, do you know the best way to a stacktrace from a failed Chai assertion? Basically, if I do: import chai from 'chai'; chai.config.includeStack = true; try { chai.expect(1).to.equals(2); } catch (e) { console.log(e.stack); } In the REPL, I'm getting `e` as an AssertionError with a trace, but in my running code, the error is coming back as a vanilla object without a stacktrace. Sorry that this is clearly not the right forum for this kind of question.

conradfr 5y ago

This page reminds of the design of a widespread squatted domains page back in the days, with a picture of a girl with a backpack. By Googling I found this [1] that leads to this one [2] Weird nostalgia. [1] https://www.reddit.com/r/pics/comments/7z628/who_the_fuck_is_this_and_why_does_she_show_up_on/ https://www.reddit.com/r/pics/comments/7z628/who_the_fuck_is... [2] https://web.archive.org/web/20160304051326/http://yousuckatwebsites.com/web-trends/the-most-infamous-girl-in-the-history-of-the-internet https://web.archive.org/web/20160304051326/http://yousuckatw...

surajs 5y ago

Try this https://chaijs.github.io/ https://chaijs.github.io/

tqkxzugoaupvwqr 5y ago

Is this a supply chain attack waiting to happen? The new domain owner can “restore” the site to look like the original but host malicious libraries. If @chaijs.com e-mail addresses were used to register accounts, e.g. on GitHub or package registries, anything belonging to these accounts would be tainted as well because its under control of the new domain owner.

Keithamus 5y ago

Just to update everyone: the domain has been renewed and is being transferred over to my account (as the current lead maintainer). We’ll use some funds to ensure it stays active for a long time and this won’t happen again.

bhartzer 5y ago
That’s awesome, great to hear.