Login
You're viewing the aleph.land public feed.
  • Martin Owens :inkscape: :flag_nonbinary:doctormo@floss.social
    Sep 28, 2026, 4:13 PM

    Wait what? What!?

    The #inkscape website was giving some people a weird permissions request to access localhost and when I dug into it I find this. The repology badge website is no more and... for some reason... points to localhost now.

    I can't raise my eyebrow enough for this, I'm going to need Vulcan ears to do it justice. 🤨 🖖

    $ ping repology.org PING repology.org (127.0.0.1) 56(84) bytes of data. 64 bytes from localhost (127.0.0.1): icmp_seq=1 ttl=64 time=0.048 ms 64 bytes from localhost (127.0.0.1): icmp_seq=2 ttl=64 time=0.072 ms
    💬 1🔄 1⭐ 6

Replies

  • Emily_Semily_s@mastodon.me.uk
    Sep 28, 2026, 4:17 PM

    @doctormo of all the things to point it at?!

    I'm actually kind of surprised that remote dns servers are allowed to pass on "this domain resolves to 127.0.0.1" results.

    💬 0🔄 0⭐ 1
  • ✧✦Catherine✦✧whitequark@treehouse.systems
    Sep 29, 2026, 1:57 PM

    @emily_s @doctormo it's not done by the owner of the domain

    the registrar seized it for some reason (probably sanctions but i don't actually know, this is speculation) and then pointed at their own NS servers, which resolve it to localhost instead of replying with NXDOMAIN. for some reason

    btw, DNSBL lists are very heavy users of "domain resolves to localhost", check it out!

    💬 0🔄 0⭐ 0