Namecheap vulnerability they refuse to fix: no 2FA on support portal login

Post by laundermaf » Sun, Aug 28, 2022, 5:50 AM UTC

ThunderSizzle wrote: post #12

unknownaccount wrote: post #7

Earlier quoted context omitted.

Choosing not to allow renewals would have been been acceptable but they straight cancelled those domains prematurely before the term of registration had ended. Basically pulling the rug out from underneath people without giving them adequate time to migrate. Allowing domains to be sniped by unscrupulous parties who put malware on them which hurt many thousands of people (mostly foreigners who had nothing to do with R…

While I don't really care about the Ukraine crisis (its just being used as a political tool here), Namecheap offices were being blown up by an invading force. If Russia wants to have free commerce with Ukraine, including domain registration, then it shouldn't have invaded. As soon as war started, all trade requirements cease. In fact, I'm surprised it didn't become illegal immediately to have any commerce with Russia…

Post by threeseed » Sun, Aug 28, 2022, 5:58 AM UTC

unknownaccount wrote: post #21

threeseed wrote: post #14

Earlier quoted context omitted.

> without giving them adequate time to migrate They gave them a month. That would seem to be plenty of time to find a new registrar and transfer the domain.

The minimum length of registration at practically all registrars is 1 year. Its practically unheard of, and against all professional standards for registrars to cancel a persons domains prematurely. Nobody expects it and they knew that and they pulled the rug anyway because apparently they value virtue signaling more than security.

Post by rocqua » Sun, Aug 28, 2022, 6:33 AM UTC

laundermaf wrote: post #22

ThunderSizzle wrote: post #12

Earlier quoted context omitted.

While I don't really care about the Ukraine crisis (its just being used as a political tool here), Namecheap offices were being blown up by an invading force. If Russia wants to have free commerce with Ukraine, including domain registration, then it shouldn't have invaded. As soon as war started, all trade requirements cease. In fact, I'm surprised it didn't become illegal immediately to have any commerce with Russia…

I get it, but this is like kicking Barron Trump (the kid) out of your home because you don’t like his father. I get that you’re angry, I get that they’re related, but the kid doesn’t really have a say in how the father behaves. Same with Putin and most Russians. I could be protesting in Moscow and you’re still pulling the domain from me. That’s not ok. - I don’t have a stake in this, I just don’t want to deal with sh…

Post by rblatz » Sun, Aug 28, 2022, 6:36 AM UTC

tobinfekkes wrote: post #23

Why is NameCheap getting thrown under the bus across the board? I've used them for 10+ years without issue. In fact, it's been stellar. Sure, the interface is a little outdated. But does anyone honestly spend any amount of time there, other than pointing the nameservers to Cloudflare? After that, I rarely ever even log in.

Post by justsomehnguy » Sun, Aug 28, 2022, 6:42 AM UTC

ThunderSizzle wrote: post #12

unknownaccount wrote: post #7

Earlier quoted context omitted.

Choosing not to allow renewals would have been been acceptable but they straight cancelled those domains prematurely before the term of registration had ended. Basically pulling the rug out from underneath people without giving them adequate time to migrate. Allowing domains to be sniped by unscrupulous parties who put malware on them which hurt many thousands of people (mostly foreigners who had nothing to do with R…

While I don't really care about the Ukraine crisis (its just being used as a political tool here), Namecheap offices were being blown up by an invading force. If Russia wants to have free commerce with Ukraine, including domain registration, then it shouldn't have invaded. As soon as war started, all trade requirements cease. In fact, I'm surprised it didn't become illegal immediately to have any commerce with Russia…