Hacker Newsnew | past | comments | ask | show | jobs | submit | pKropotkin's commentslogin

Yeah, basemetrika.ru is free now. Should we occupy it? ;)


I registered it about 40 minutes ago, but it seems the DNS has been cached by everyone as a result of the wikipedia hack & not even the NS is propagating. Can't get an SSL certificate .


I had looked into its availability too just out of curiosity itself before reading your comment on a provider, Then I read your comment. Atleast its taken in from the hackernews community and not a malicious actor.

Do keep us updated on the whole situation if any relevant situation can happen from your POV perhaps.

I'd suggest to give the domain to wikipedia team as they might know what could be the best use case of it if possible.


This community has no malicious actors? :)


I'm not malicious at least :)

Pretty public with who I am https://duti.dev/


Not quite sure which channels I should reach out via but I've put my email on the page so they can contact me.

Based on timings, it seems that Wikipedia wasn't really at risk from the domain being bought as everything was resolved before NS records could propagate. I got 1 hit from the URL which would've loaded up the script and nothing since.


Its misinformation that the malicious script loaded that domain. The malicious script did have a url with that domain in it, but it wouldnt load javascript from it (possibly due to a programming mistake/misunderstanding by the author, its kind of unclear what the original intent was)


nice work


Namecheap won’t sell it which is great because it made me pause and wonder whether it's legal for an American to send Russians money for a TLD.


Namecheap is Ukrainian, of course they won't sell you a .ru domain.


Is it? Wikipedia says:

> Namecheap is a U.S. based domain name registrar and web hosting service company headquartered in Phoenix, Arizona.

and in 2025 they were purchased by:

> CVC Capital Partners plc is a Jersey-based private equity and investment advisory firm


https://news.ycombinator.com/item?id=30504812

Top comment is from the CEO and explains: "We have people on the ground in Ukraine being bombarded now non stop."


I'm not questioning whether or not they have Ukrainian employees, I'm questioning the statement "Namecheap is Ukrainian". That post+comment does not address that. McDonalds has employees in Vietnam but McDonalds is not Vietnamese.


I remember that in 2022 a sizeable part of their workforce was located in Ukraine. Too lazy to search for proof, sorry!


It is. Just punch it's name in the search box down below.


Pretty sure it is, however, the reverse is actually illegal (for US citizens to provide professional services to anyone residing in Russia) as of like 2022-ish


This is incorrect.



Only certain services?


Only to certain entities.


I'm half-tempted to try and claim it myself for fun and profit, but I think I'll leave it for someone else.

What should we put there, anyway?


A JavaScript call to window.alert to pause the JavaScript VM.


Looks like someone other from the hackernews community has bought the domain https://news.ycombinator.com/item?id=47263323#47265499


Go old school and have the script inject the "how did this get here im not good with computers" cat onto random pages


I'd log requests and echo them back in the page


The antinuke


It means giving money to the Russian government, so no.

If anyone from the Russian government is reading this, get the fuck out of Ukraine. Thank you.


Well done, it's finally over


Thanks! For my next trick, I'll solve systemic racism by turning my logo black for a month.


Make sure you support LGBT rights by superimposing a rainbow over your rainbow, but only in the countries where LGBT people already have rights - it would be bad for business to do it in those other countries.


"In 2023, the United States imported U3O8 and equivalents primarily from Canada, Australia, Russia, Kazakhstan, and Uzbekistan. The origin of U3O8 used in U.S. nuclear reactors could change in the coming years. In May 2024, the United States banned imports of uranium products from Russia beginning in August, although companies may apply for waivers through January 1, 2028."

https://www.eia.gov/todayinenergy/detail.php?id=64444


[flagged]


If anyone is genuinely curious about this, they were indeed letting Russian gas through and stopped in 2025:

> On 1 January 2025, Ukraine terminated all Russian gas transit through its territory, after the contract between Gazprom and Naftohaz signed in 2019 expired. [...] It is estimated that Russia will lose around €5bn a year as a result.

https://en.wikipedia.org/wiki/Russia%E2%80%93Ukraine_gas_dis...


You must be fun at parties


They're a ... gas.


More fun than GP lol


[flagged]


I don't think voting with your wallet constitutes virtue signaling, especially at a time when end user boycotting is one of the universally known methods of protest.


I am a pragmatist so maybe I will never understand this line of thinking. But in my mind, there are no perfect options, including doing nothing.

By doing nothing, you are allowing a malicious actor to buy the domain. In fact I am sure they would love for everyone else to be paralyzed by purity tests for a $1 domain.

All things being equal, yeah don’t buy a .ru domain. But they are not equal.


Why do you need another source of irritation in your room?


I don't think anyone is arguing that you NEED this. But it's the intersection of technology and art, and says something about the way we live. You can view it as nothing more than an irritation, but I think that's a shame.


Are you asking why he needs another light? His project doesn’t make radio waves.


Good but I want POCSAG-compatible radio version like DAPNET


If you’re OK with plugging in an RTLSDR we could probably figure this out


Thanks God, i am not using google


A public invitation to protest against my authoritarian government should not turn on total paranoia mode and cipher the opening hours of the local bakery. It's unnecessary I'd also like to remind you that the vast majority of e-mails are still unencrypted


> vast majority of e-mails are still unencrypted

Kinda sorta. In transit most email is encrypted, the big mail providers all both speak and expect TLS encryption when moving mail. Almost everybody configures TLS encrypted IMAP if they use a client, or reads email over HTTPS

> A public invitation to protest against my authoritarian government should not turn on total paranoia mode

The expectations ordinary people have for how the web works are not met by the basic HTTP protocol. They need HTTPS to deliver those basic assumptions. Who decides the hours of the local bakery? Is it Jeff Bezos? HTTP says that seems fine, but HTTPS says no, the bakery gets to decide, not Jeff.


Yes, many providers use TLS with SMTP. But that works with self-signed certificates.


Can you say that for everyone though, that they should have a local bakery and use its opening hours? There are also more cases than that, where something being public does not mean that someone should see you looking at that info.

While the situation with emails is worse it does not mean it should be like that.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: