News for hackers. Stuff that matters.
Re:Ask HN: Was GitHub Hacked or Me? by applecrazy on Wednesday April 03, 2019 @03:14PM (#19566304)
Yes. This is what I just discovered. OP here's the malicious github account, so we can get it banned:

https://github.com/OnyonCapitaly

I found a repo with your domain:

https://github.com/OnyonCapitaly/confidencetoexplore.com

edit: just reported them, but you should too OP.

Re:Ask HN: Was GitHub Hacked or Me? by applecrazy on Wednesday April 03, 2019 @06:42PM (#19567840)
Aaaand it’s down! Good job Github and everyone who helped.

Hope this helped, OP

Re:Ask HN: Was GitHub Hacked or Me? by ronsor on Wednesday April 03, 2019 @05:10PM (#19567289)
The script kiddie will just signup for another account and "hack" the same sites again.
Re:Ask HN: Was GitHub Hacked or Me? by vokep on Wednesday April 03, 2019 @05:43PM (#19567489)
At least now they have to go through that effort again
Re:Ask HN: Was GitHub Hacked or Me? by techntoke on Wednesday April 03, 2019 @07:43PM (#19568179)
Does GitLab have this issue? Don't they offer all this for free, unlike GitHub?
Re:Ask HN: Was GitHub Hacked or Me? by lscotte on Wednesday April 03, 2019 @08:11PM (#19568314)
I don't know if they handle this case better specifically, but I found almost all GitLab page functionality is better than GitHub - plus it's more generic, you can wire any static page generator into the built-in CI/CD, not just limited to jekyll or doing it yourself.
Re:Ask HN: Was GitHub Hacked or Me? by therealmarv on Wednesday April 03, 2019 @09:26PM (#19568610)
GitLab requires you to put a txt record with a verification code in your custom private domain DNS to verify ownership.

TL;DR no, GitLab does not have that issue.

Re:Ask HN: Was GitHub Hacked or Me? by gitlab-security on Wednesday April 03, 2019 @09:59PM (#19568754)
Confirming the previous poster's comment on GitLab Pages domain ownership verification functionality, which was rolled out in February of 2018. https://about.gitlab.com/2018/02/05/gitlab-pages-custom-doma...
Re:Ask HN: Was GitHub Hacked or Me? by scottndecker on Wednesday April 03, 2019 @03:43PM (#19566566)
Thank you! This is nuts that this can happen and someone would do such a thing. Stupid.
Re:Ask HN: Was GitHub Hacked or Me? by marketgod on Wednesday April 03, 2019 @10:30PM (#19568880)
You are awesome. Good work!
Re:Ask HN: Was GitHub Hacked or Me? by applecrazy on Thursday April 04, 2019 @12:03AM (#19569221)
Thanks! This is the first time I've done this kind of internet sleuthing. It's a fun experience.
Re:Ask HN: Was GitHub Hacked or Me? by sarcasmatwork on Wednesday April 03, 2019 @03:27PM (#19566420)
Reported too...
Re:Ask HN: Was GitHub Hacked or Me? by scottndecker on Wednesday April 03, 2019 @03:43PM (#19566567)
Thank you!