What does this mean?

Discussion of anything and everything relating to chess playing software and machines.

Moderator: Ras

User avatar
Gabor Szots
Posts: 1493
Joined: Sat Jul 21, 2018 7:43 am
Location: Budapest, Hungary
Full name: Gabor Szots

What does this mean?

Post by Gabor Szots »

On the https://github.com/feliskio/svart website I read:

🛡️ Responsible Disclosure – Repo Takeover Proof This repository was created as part of a responsible disclosure effort.

The GitHub username crippa1337 was previously unclaimed

“This repo was taken over for responsible disclosure. No malicious content is served.”

I can't interpret that, pease help.

BTW, no Svart engine is offered on the page.
Gabor Szots
CCRL testing group
jdart
Posts: 4420
Joined: Fri Mar 10, 2006 5:23 am
Location: http://www.arasanchess.org

Re: What does this mean?

Post by jdart »

It probably means a hacker has taken over the repository via a dangling subdomain and is demonstrating that fact - they may be trolling for a bug bounty. See https://owasp.org/www-project-web-secur ... n_Takeover.
User avatar
Gabor Szots
Posts: 1493
Joined: Sat Jul 21, 2018 7:43 am
Location: Budapest, Hungary
Full name: Gabor Szots

Re: What does this mean?

Post by Gabor Szots »

Thanks Jon for the explanation.

BTW, in the meantime I learned that the new URL of Svart was https://github.com/1337crisis/svart.
Gabor Szots
CCRL testing group