<![CDATA[What a bad day for #Ubuntu to be down and under attack, especially with everyone looking for details on copy.fail and cPanel.]]>What a bad day for to be down and under attack, especially with everyone looking for details on copy.fail and cPanel.

Since people chasing down info on them keep running into Ubuntu issues, they seem to be under active attack:
https://www.theregister.com/2026/05/01/canonical_confirms_ubuntu_infrastructure_under/?td=rt-3a

They are now returning localhost addresses for www.ubuntu.com:

$ host www.ubuntu.com
www.ubuntu.com has address 127.0.0.1
www.ubuntu.com has IPv6 address ::1

]]>https://board.circlewithadot.net/topic/2f252955-e410-4d61-bd7e-2cc60ecfe44d/what-a-bad-day-for-ubuntu-to-be-down-and-under-attack-especially-with-everyone-looking-for-details-on-copy.fail-and-cpanel.RSS for NodeThu, 14 May 2026 21:44:25 GMTFri, 01 May 2026 19:49:55 GMT60<![CDATA[Reply to What a bad day for #Ubuntu to be down and under attack, especially with everyone looking for details on copy.fail and cPanel. on Sat, 02 May 2026 12:22:42 GMT]]>@nygren Wouldn't an nxdomain do that? But I'm not sure I would want to make any change like that. Surprised to see them pointing to a loopback, that is very unusual and seems like the wrong approach to me.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/jtk/statuses/116504956953135590https://board.circlewithadot.net/post/https://infosec.exchange/users/jtk/statuses/116504956953135590Sat, 02 May 2026 12:22:42 GMT<![CDATA[Reply to What a bad day for #Ubuntu to be down and under attack, especially with everyone looking for details on copy.fail and cPanel. on Fri, 01 May 2026 19:57:57 GMT]]>@nygren yeah, but it's nice to think that some DDoS folk might be hammering 127.0.0.1 as hard as they can?

]]>https://board.circlewithadot.net/post/https://layer8.space/users/damien/statuses/116501084730574461https://board.circlewithadot.net/post/https://layer8.space/users/damien/statuses/116501084730574461Fri, 01 May 2026 19:57:57 GMT<![CDATA[Reply to What a bad day for #Ubuntu to be down and under attack, especially with everyone looking for details on copy.fail and cPanel. on Fri, 01 May 2026 19:51:34 GMT]]>Side-note relative to:

$ host www.ubuntu.com
www.ubuntu.com has address 127.0.0.1
www.ubuntu.com has IPv6 address ::1

it would be good for "us" (IETF?) to define a better way to indicate "this site is authoritatively unavailable for now". On IPv6 the discard prefix might be an option, but there's no clear option for IPv4.

]]>https://board.circlewithadot.net/post/https://hachyderm.io/users/nygren/statuses/116501059617937678https://board.circlewithadot.net/post/https://hachyderm.io/users/nygren/statuses/116501059617937678Fri, 01 May 2026 19:51:34 GMT