3 ms·

Ruby on Rails website defaced?

23 points by csbartus 18y ago

mahmud 18y ago
Conflicting messages are abound: http://www.techcrunch.com/2009/04/23/rubyonrailsorg-domain-derailed-by-hacker/ http://www.techcrunch.com/2009/04/23/rubyonrailsorg-domain-d...
- ericb 18y ago
  That's not a conflicting message. That's poor reporting combined with an attempt to imply drama that anyone familiar in the least with domains can see is highly unlikely. Edit: The reporting is about this good: "man in valet jacket seen driving car he doesn't own to hotel entrance. Possible theft?"
  - graywh 18y ago
    And yet, we still put up the techcrunch articles.
    - ericb 18y ago
      Their "source" was a random tweet from someone with no relation to the situation. They should be embarrassed. I'm going to tweet that Microsoft is switching to Linux to help them with their next article.
behe 18y ago
Looks more like someone forgot to renew the domain.
chaosmachine 18y ago
Not a hack, but a registrar issue.
- jherdman 18y ago
  Parent is correct: http://twitter.com/d2h/status/1590279638 http://twitter.com/d2h/status/1590279638
smanek 18y ago
http://www.whois.net/whois/rubyonrails.org.com http://www.whois.net/whois/rubyonrails.org.com It seems like the owner info was changed a few hours ago to http://buydomains.dk/ http://buydomains.dk/
- deleted 18y ago
  [deleted]
csbartus 18y ago
That means the domain must be bought back by Rails? What is your price estimated for the buyback?
moeffju 18y ago
More likely they let it expire or the registrar messed up. (DHH claims the latter: http://twitter.com/d2h/status/1590279638 http://twitter.com/d2h/status/1590279638) (Speculation: Why don't US registrars usually offer autorenewal? Here in Europe, especially Germany, it is unthinkable that my domain would just expire. I get auto-renew by default, no matter how I pay. Conversely, with the US servers and domains we hold, sometimes people don't even get payment reminders before the expiration date. Only when it's too late do you get a notification. I find that strange.)
- Jem 18y ago
  I've always wondered how people could forget their domains. I get at least 7-8 reminders for my domains prior to their expiry, and that's even on domains set to auto-renew. It didn't occur to me it was a difference between European/US registrars.
  - moeffju 18y ago
    Friends of me had it happen with web hosters, server housing and domain registrars. When they were just starting out and forgot to tell the provider to get the monies from their credit card, or whatever, they would just disconnect the server or park the domain. Happened a few times and is really annoying. I had assumed it to be a function of the far better giro system here in Europe, but since a few months I'm paying most things by regular credit card bookings instead of bank transfer, and it still works. Maybe people just need to ask for and demand automated payment?
    - morganiangoose 18y ago
      the fact that it happened twice I think is telling though. At that point they have only themselves to blame.
- deleted 18y ago
  [deleted]
- tvon 18y ago
  I don't know what you're doing with your U.S. servers but Network Solutions and GoDaddy both offer auto renewal by default and warn you when your domain is going to expire.
Keyframe 18y ago
you can buy a domain back (more correctly, extend your lease, not buy back - because nobody can get a long hold on it in that time frame) at the same price in the time frame of 3 days - no matter what. Sadly, I speak from experience.
gaoshan 18y ago
So who is the registrar? Seems pretty serious to screw up a domain like that, especially a domain that is so major in the web dev world. I want to know who to avoid using in the future.
- csbartus 18y ago
  it seems to be http://www.enom.com/ http://www.enom.com/
datums 18y ago
Should just be able to log in and renew. Looks like it's an eNom reseller. Domain Name:RUBYONRAILS.ORG Created On:19-Apr-2004 22:40:29 UTC Last Updated On:23-Apr-2009 00:07:53 UTC Expiration Date:19-Apr-2010 22:40:29 UTC Ip of parked paged owned by eNom
miracle 18y ago
In Luxembourg (.lu), the registrar just disconnects your domain name for or a few days before it's free to register again. If your domain doesn't work anymore, you will probably notice and check if you have missed to pay or not.
- erlanger 18y ago
  I want to get some .lu domain names...ac.lu!
adammarkey 18y ago
Maybe Oracle will buy this now too.
_pius 18y ago
You'd think after the last time, they would have switched to a decent domain host that sends reminders.
st3fan 18y ago
Uhoh. Looks like someone forgot to renew the domains.
carbon8 18y ago
The exact same thing happened last year.
morganiangoose 18y ago
The use enom, so their domain is in holding atm, so only the owner can renew it. They will mostlikely have to pay ~135$ is it is considered in a redemption period. Enom does offer an auto renewal option, but its an option, not a default. Domain Name:RUBYONRAILS.ORG Created On:19-Apr-2004 22:40:29 UTC Last Updated On:23-Apr-2009 00:07:53 UTC Expiration Date:19-Apr-2010 22:40:29 UTC Sponsoring Registrar:eNom, Inc. (R39-LROR) Status:CLIENT TRANSFER PROHIBITED Status:AUTORENEWPERIOD

23 points by csbartus 18y ago

Conflicting messages are abound: http://www.techcrunch.com/2009/04/23/rubyonrailsorg-domain-derailed-by-hacker/ http://www.techcrunch.com/2009/04/23/rubyonrailsorg-domain-d...

ericb 18y ago
That's not a conflicting message. That's poor reporting combined with an attempt to imply drama that anyone familiar in the least with domains can see is highly unlikely. Edit: The reporting is about this good: "man in valet jacket seen driving car he doesn't own to hotel entrance. Possible theft?"
- graywh 18y ago
  And yet, we still put up the techcrunch articles.
  - ericb 18y ago
    Their "source" was a random tweet from someone with no relation to the situation. They should be embarrassed. I'm going to tweet that Microsoft is switching to Linux to help them with their next article.

behe 18y ago

Looks more like someone forgot to renew the domain.

chaosmachine 18y ago

Not a hack, but a registrar issue.

jherdman 18y ago
Parent is correct: http://twitter.com/d2h/status/1590279638 http://twitter.com/d2h/status/1590279638

smanek 18y ago

http://www.whois.net/whois/rubyonrails.org.com http://www.whois.net/whois/rubyonrails.org.com It seems like the owner info was changed a few hours ago to http://buydomains.dk/ http://buydomains.dk/

deleted 18y ago
[deleted]

csbartus 18y ago

That means the domain must be bought back by Rails? What is your price estimated for the buyback?

moeffju 18y ago

More likely they let it expire or the registrar messed up. (DHH claims the latter: http://twitter.com/d2h/status/1590279638 http://twitter.com/d2h/status/1590279638) (Speculation: Why don't US registrars usually offer autorenewal? Here in Europe, especially Germany, it is unthinkable that my domain would just expire. I get auto-renew by default, no matter how I pay. Conversely, with the US servers and domains we hold, sometimes people don't even get payment reminders before the expiration date. Only when it's too late do you get a notification. I find that strange.)

Jem 18y ago
I've always wondered how people could forget their domains. I get at least 7-8 reminders for my domains prior to their expiry, and that's even on domains set to auto-renew. It didn't occur to me it was a difference between European/US registrars.
- moeffju 18y ago
  Friends of me had it happen with web hosters, server housing and domain registrars. When they were just starting out and forgot to tell the provider to get the monies from their credit card, or whatever, they would just disconnect the server or park the domain. Happened a few times and is really annoying. I had assumed it to be a function of the far better giro system here in Europe, but since a few months I'm paying most things by regular credit card bookings instead of bank transfer, and it still works. Maybe people just need to ask for and demand automated payment?
  - morganiangoose 18y ago
    the fact that it happened twice I think is telling though. At that point they have only themselves to blame.
deleted 18y ago
[deleted]
tvon 18y ago
I don't know what you're doing with your U.S. servers but Network Solutions and GoDaddy both offer auto renewal by default and warn you when your domain is going to expire.

Keyframe 18y ago

you can buy a domain back (more correctly, extend your lease, not buy back - because nobody can get a long hold on it in that time frame) at the same price in the time frame of 3 days - no matter what. Sadly, I speak from experience.

gaoshan 18y ago

So who is the registrar? Seems pretty serious to screw up a domain like that, especially a domain that is so major in the web dev world. I want to know who to avoid using in the future.

csbartus 18y ago
it seems to be http://www.enom.com/ http://www.enom.com/

datums 18y ago

Should just be able to log in and renew. Looks like it's an eNom reseller. Domain Name:RUBYONRAILS.ORG Created On:19-Apr-2004 22:40:29 UTC Last Updated On:23-Apr-2009 00:07:53 UTC Expiration Date:19-Apr-2010 22:40:29 UTC Ip of parked paged owned by eNom

miracle 18y ago

In Luxembourg (.lu), the registrar just disconnects your domain name for or a few days before it's free to register again. If your domain doesn't work anymore, you will probably notice and check if you have missed to pay or not.

erlanger 18y ago
I want to get some .lu domain names...ac.lu!

adammarkey 18y ago

Maybe Oracle will buy this now too.

_pius 18y ago

You'd think after the last time, they would have switched to a decent domain host that sends reminders.

st3fan 18y ago

Uhoh. Looks like someone forgot to renew the domains.

carbon8 18y ago

The exact same thing happened last year.

morganiangoose 18y ago

The use enom, so their domain is in holding atm, so only the owner can renew it. They will mostlikely have to pay ~135$ is it is considered in a redemption period. Enom does offer an auto renewal option, but its an option, not a default. Domain Name:RUBYONRAILS.ORG Created On:19-Apr-2004 22:40:29 UTC Last Updated On:23-Apr-2009 00:07:53 UTC Expiration Date:19-Apr-2010 22:40:29 UTC Sponsoring Registrar:eNom, Inc. (R39-LROR) Status:CLIENT TRANSFER PROHIBITED Status:AUTORENEWPERIOD