News for hackers. Stuff that matters.
Re:Show HN: URL Canary – Get an alert when someone finds you... by efficax on Monday March 19, 2018 @01:18PM (#16620371)
Will the canary URLs always be to the same domain? If so, can't I circumvent this just by using custom dns locally to map that domain to somewhere else, like localhost? If it's not a domain, but an IP address, can't I just route that IP somewhere else?
Re:Show HN: URL Canary – Get an alert when someone finds you... by jstanley on Monday March 19, 2018 @01:21PM (#16620426)
There are currently 3 domains available. If this takes off I could do something like mailinator (offer the user a small selection, but never reveal the full list at once).

You can also register your own domain and point it at my server and your canary will work just fine on that domain.

If you're playing at a high enough level that you've specifically blackholed URL Canary traffic by IP address, then you're a worthy adversary. And additionally, that is a splendid problem for my project to have.

On the enterprise tier you even get your own server with its own IP address, so there should be nothing linking it to URL Canary at all. (Although the enterprise tier is extremely expensive, and if anyone buys it I will probably panic).