Namecheap CEO offers $10k bounty for changing someone else's domain via helpdesk
1–10 of 99 posts
Re: Namecheap CEO offers $10k bounty for changing someone else's domain via helpdesk
#2completely violating your users trust is an interesting way to react to a disclosure of a potential security vulnerability
Re: Namecheap CEO offers $10k bounty for changing someone else's domain via helpdesk
#3completely violating your users trust is an interesting way to react to a disclosure of a potential security vulnerability
"Nefarious actors are attempting these things 24/7 regardless. As a registrar for millions of domains names, we are constantly under attack so this isn't anything new." - https://twitter.com/NamecheapCEO/status/1564077063480418307
I guess this makes sense. On the other hand such actions might have had legal implications before. I mean until the CEO actively allowed / awarded them.
Re: Namecheap CEO offers $10k bounty for changing someone else's domain via helpdesk
#4> Also, I'll put my money where my mouth is. If you can make any changes to a domain that is not yours or a friend's via our help desk, I will send you 10k USD, no questions asked.
> and to clarify, said account must be protected by 2fa to begin with.
I appreciate what he's trying to say... but perhaps he should instead recommend white-hats instead create a test account and try to access it without using the 2FA mechanism.
Re: Namecheap CEO offers $10k bounty for changing someone else's domain via helpdesk
#5completely violating your users trust is an interesting way to react to a disclosure of a potential security vulnerability
"Nefarious actors are attempting these things 24/7 regardless. As a registrar for millions of domains names, we are constantly under attack so this isn't anything new." - https://twitter.com/NamecheapCEO/status/1564077063480418307 I guess this makes sense. On the other hand such actions might have had legal implications before. I mean until the CEO actively allowed / awarded them.
This doesn’t have any meaningful legal implications.
You will still be in trouble if you deface some random Namecheap customers website to claim this bounty.
Re: Namecheap CEO offers $10k bounty for changing someone else's domain via helpdesk
#6Maybe you could put your actions where your mouth is and just add a 2fa step to the support portals login process? As a namecheap user I don't want to be randomly targeted to prove a point in some face saving contest.
Re: Namecheap CEO offers $10k bounty for changing someone else's domain via helpdesk
#7Cool. This reminded me to delete my personal and business Namecheap accounts now that all the resources I had with them have been transferred or expired. Thanks, idiotic Namecheap CEO!
Re: Namecheap CEO offers $10k bounty for changing someone else's domain via helpdesk
#8What a weird thing to get excited about.
Re: Namecheap CEO offers $10k bounty for changing someone else's domain via helpdesk
#9Poorly worded bounty, IMO.
Re: Namecheap CEO offers $10k bounty for changing someone else's domain via helpdesk
#10Namecheap is good. They are my registrar, even though Amazon would be easier, because their support + personability makes me feel like I'm dealing with human beings.
They are the Linode of the domain space.