Live data from Hacker News

FTC takes action against GoDaddy for alleged lax data security

ftc.gov

1–10 of 181 posts

Re: FTC takes action against GoDaddy for alleged lax data security

#3

I never thought I'd be a fan of a government agency. But here we are.

Press release is dated Jan 15. The folks who made this happen are gone now.

If you'd like to see what the new admin's FTC is spending your tax dollars on instead of this, take a look here: https://www.ftc.gov/news-events/news/press-releases

Re: FTC takes action against GoDaddy for alleged lax data security

#5
It's amazing that (approximately) no one cares about stuff like this.

GoDaddy was severely breached several times over several years, yet they still rake in billions of revenue from their millions of customers. Now they have to pay someone to fill out a biennial checklist and... promise to not lie. Awesome.

If you own a company, why even bother with security? Security is expensive. Wait until a breach is exposed, offer $10 credit monitoring (at best), accept the free press coverage, maybe pinky promise to not lie if you've been particularly egregious in your handling of multiple incidents, and then carry on like normal. (This is tongue-in-cheek, I work in security, but I am frustrated with how often stories like this one occur)

Re: FTC takes action against GoDaddy for alleged lax data security

#6
post #5

It's amazing that (approximately) no one cares about stuff like this. GoDaddy was severely breached several times over several years, yet they still rake in billions of revenue from their millions of customers. Now they have to pay someone to fill out a biennial checklist and... promise to not lie. Awesome. If you own a company, why even bother with security? Security is expensive. Wait until a breach is exposed, off…

>If you own a company, why even bother with security? Security is expensive. Wait until a breach is exposed, offer $10 credit monitoring (at best), accept the free press coverage, maybe pinky promise to not lie if you've been particularly egregious in your handling of multiple incidents, and then carry on like normal. (This is tongue-in-cheek, I work in security, but I am frustrated with how often stories like this one occur)

As SRE, I've heard executives say this "There is no penalty for breaches, why care?"

Re: FTC takes action against GoDaddy for alleged lax data security

#7
post #3

I never thought I'd be a fan of a government agency. But here we are.

Press release is dated Jan 15. The folks who made this happen are gone now. If you'd like to see what the new admin's FTC is spending your tax dollars on instead of this, take a look here: https://www.ftc.gov/news-events/news/press-releases

Why do you think they’re gone now?

(Sounds like hyperbole, as it’s not like non political people just all got replaced.)

Re: FTC takes action against GoDaddy for alleged lax data security

#9
post #4

I guess its just the power of advertising but its amazing to me that GoDaddy continues to be a popular solution for hosting, domain registration, etc given their absolute toilet of a reputation.

They got their product out.

Who else is there that the average person would know about?

Re: FTC takes action against GoDaddy for alleged lax data security

#10
post #4

I guess its just the power of advertising but its amazing to me that GoDaddy continues to be a popular solution for hosting, domain registration, etc given their absolute toilet of a reputation.

They got their product out. Who else is there that the average person would know about?

Yup they dominate mindshare.

And their UI for choosing a domain name is excellent.

Post reply on HN