Slashdot Mirror
Name.com Resets All Passwords Following Security Breach
An anonymous reader writes "Internet registrar Name.com on Wednesday revealed it was hit by a security breach. The company sent an email to its customers informing them that their usernames, email addresses, passwords, and credit card account information "may have been accessed by unauthorized individuals.""
the linode incident?
And I did not receive any emails from them today.
I went in and changed it manually after I saw this, but it was never reset by name.com in the first place...
This is NOT news. Name.com has had an annual security breach for a minimum of 5 years. This is not news at all.
They can't even spell measure properly. Why would you trust them with any personal information?
Domainsite.com (owned by name.com) were also affected and notified their customers accordingly this morning.
I'm not convinced there aren't still issues - I have two-factor authentication on my Name.com account via a Verisign authenticator, and Name.com always asks for a code from the card the instant I type the last character of my username. They're not asking for that code now, which seems rather odd. Anyone else had the same experience?
takes everything you've got.
Finding a site with decent security, sure would help a lot.
Wouldn't you like some SSH?
Sometimes you want to go
Where everybody knows your name,
and the Chinese are always there to blame.
You wanna be where you can see,
our passwords are all the same
You wanna be where everybody knows
Your name.
htp5
This all stemmed from a hacking group trying to get access to Linode through Name.com. You can read more about it here, but keep in mind that Name.com is a very small part of the overall story: https://news.ycombinator.com/item?id=5667027
For those that don't understand, even changing your password won't protect you at this point. The breach hasn't been filled, if that makes sense, as they used a zero day exploit on Name.com (and a few other registrars). Basically, they can still access your account if they want to, whether you change the password or not. I could be entirely wrong about that, but they make no mention of the technical fix, nor has the hacker group said anything about NOT having access any longer.
It is correct that these hackers do not have access to your credit card number, but they can still make charges with your Payment Profile setup in the account. I'd suggest removing any payment profiles to be on the safe side. Also, they can still access your EPP codes because they are able to get into your account. Sure, the codes aren't stored at Name.com (same with the CC info) but they have access to your account. All the hackers need to do is log in to the account, click on a domain, and look at the EPP code being displayed, very simple.
This email they sent out isn't very descriptive of what happened and what could happen. Even users with the NameSafe feature aren't protected, as having admin access bypasses that system. There is a good reason why there wasn't a response for over 24 hours by Name.com and why there still (as of the time I'm writing this) no blog post. Even if a blog post DOES get made, it won't be much more descriptive than the email that went out.
Wonder if Demand Media is regretting that purchase now?
.
(2) Tell the world that something bad happened
(3) Profit
I come here for the love
https://news.ycombinator.com/item?id=5667391
In the above HN comment, basically it explains the linode hack, saying they got access to linodes registrar and were going to use it to steal passwords from linode customers. But they ended up finding the Coldfusion hole made it possible to break directly into linode, so they used that instead.
Its not what it is, its something else.
Found this, seems legit:
http://pastebin.com/We3xgT4J
"Beware of bugs in the above code; I have only proved it correct, not tried it." -- Donald Knuth
lol ?
Why would they? They can just "Due to the unfortunate circumstances of a continuing bad economy, we have had to shutdown name.com. Sorry for the inconvenience, lol." and done. Their hands are wiped clean, the low-level IT workers are Romney'd in one fell swoop, the fat cats still get cash from their bulk-writing SEO scheme, and they can just buy up whoever else decides to take over whatever domain( name)?s they managed.
You can hold down the "B" button for continuous firing.
How on earth is it possible at all that an IT related company stores passwords in a form that the information can get leaked?
That I didn't order.. I went in a change my password anyway... Wondering how close my domain was to getting stolen?
-- these are only opinions and they might not be mine.