3 ms·
404 for both of https://ftp.bit.nl/.well-known/security.txt https://ftp.bit.nl/.well-known/security.txt https://ftp.bit.nl/security.txt https://ftp.bit.nl/secur
by a3w 1y ago
404 for both of
https://ftp.bit.nl/.well-known/security.txt https://ftp.bit.nl/.well-known/security.txt
https://ftp.bit.nl/security.txt https://ftp.bit.nl/security.txt
Wrong place, did not read. Here go the ``security researchers'' begging/threatening for money.
- proactivesvcs 1y agoAnd they wouldn't think to: ~ $ whois -h whois.abuse.net ftp.bit.nl abuse@bit.nl (for bit.nl)
- blueflow 1y agoWhere do domain owners specify that address so that this service can answer these queries?
- proactivesvcs 1y agohttps://abuse.net/addnew.phtml https://abuse.net/addnew.phtml
- blueflow 1y agoIf you wanna get an abuse address, resolve to the IP and query RIPE for the abuse mail. Every RIPE member needs to specify an abuse address and what they specify is the source of truth for their AS. No need to query a crowdsourced hearsay service. I did not know of this service until now, so any correct result it has for any of my domains is a matter of coincidence.
- proactivesvcs 1y agoI've used it for decades and don't recall a time whereby a hit has not been accurate, whereas abuse contacts listed on RIPE and all of the other registries are hit and miss, if they exist. In addition anyone who has listed their domains there probably knows what they're doing, and won't demand a CAPTCHA, an essay or an account to report abuse.
- devttyUSB0 1y agofixed it. thanks for pointing that out.
- sleepyhead 1y ago"Security Researchers" does not know security.txt exists anyways.
- a3w 1y agoUsually, you can find contacts instead of writing to random admins in abuse or security info. Helps them make money, so most should know low-hanging fruit like this.