Page 1 of 1

Who to contact regarding security issues with website software?

Posted: Fri Dec 18, 2020 2:19 am
by blazespinnaker
whois factorio.com just gives cloudflare stuff.

Please PM me. You can delete this message or move it to offtopic when you read it.

Re: Who to contact regarding security issues with website software?

Posted: Fri Dec 18, 2020 6:40 am
by Koub
With GDPR, Europe has provided itself regulations on when, why, how and for how long personal data collected by an entity (a company, administration, ...) could be used, processed, displayed.
This conflicted with the way whois works (by publicly displaying the domain's owner infos). I guess it's the solution found by the whois providers : The whois who still needs these personal informations to do its job, but doesn't display thenm by default. There is still, however, a way to get in touch with the domain's owners (via an intermediary form).

More on this : https://manage.whois.com/kb/node/3112

Re: Who to contact regarding security issues with website software?

Posted: Fri Dec 18, 2020 6:55 am
by blazespinnaker
yeah, so I'm in infosec. Usually folks have an abuse email poc in their whois reg. I could email cloudflare about the hosted malware, but that could end up with all of factorio.com taken offline. Not ideal. ideally someone from wube would jump on this. this sort of thing can really wreak havoc, especially if its a well visited domain url by generic users.

Re: Who to contact regarding security issues with website software?

Posted: Fri Dec 18, 2020 7:55 am
by Klonan

Re: Who to contact regarding security issues with website software?

Posted: Fri Dec 18, 2020 12:19 pm
by blazespinnaker
sure, done.