Live data from Hacker News

Tell HN: Namecheap gave my account to an unverified third party

news.ycombinator.com

41–50 of 190 posts

Re: Tell HN: Namecheap gave my account to an unverified third party

#41

Namecheap has been owned by a private equity firm for several months now. It would be nice to have a nonprofit registrar so jumping every few years isn't necessary.

...seriously? Where do I jump ship to now?

I like https://www.dynadot.com/. Good prices and privately owned for 30+ years.

Re: Tell HN: Namecheap gave my account to an unverified third party

#42

Earlier quoted context omitted.

...seriously? Where do I jump ship to now?

Porkbun. Yes, Cloudflare Domains exists but let's support the small guys.

Given Cloudflare's reputation for shakedowns once you pass their undisclosed thresholds I wouldn't trust them with my domains.

I'm not expecting something for nothing, we all need to eat. I'm happy to stay within any limits or even have no free tier at all.

I just don't want the fear of waking up to a sales email one morning demanding I suddenly fork out more then I earn in a year off the project for an enterprise plan because I've exceeded their undisclosed thresholds.

Re: Tell HN: Namecheap gave my account to an unverified third party

#43

Namecheap has been owned by a private equity firm for several months now. It would be nice to have a nonprofit registrar so jumping every few years isn't necessary.

...seriously? Where do I jump ship to now?

Porkbun!

Re: Tell HN: Namecheap gave my account to an unverified third party

#44
post #20
post #11

I've been a long, long term customer of Namecheap as well. Domain privacy protection is a feature that Namecheap provides for all valid domains. Its included by default at no extra cost. The poster didn't indicate if they had this feature enabled or not for the domain. It would have prevented the college club person from even seeing their email address to initiate a password reset. This clearly isn't an answer for NC…

How is domain privacy relevant here? That only hides your email from public records. What if the attacker already knows it (as they did in this case)? Email address is quite literally something you are meant to share publicly. It is not a password.

Registration info usually also includes a physical address and names.

Re: Tell HN: Namecheap gave my account to an unverified third party

#45
post #28

CloudFlare has their plusses and minuses, but they do offer domain registration at cost, for example $10.46/year for .com (every year, not one of those deals for the first year then more expensive down the line).

The problem is that they then force you to use them as a DNS host as well.

You actually can use your own nameservers... if you pay for the business plan which is $2400/yr.

Re: Tell HN: Namecheap gave my account to an unverified third party

#47
post #23
post #2

Yep. I've been with Namecheap for a similar length of time. This week they sent me an email saying I had to update my namecheap profile information or they would close my account in 24 hours. They locked my account so I couldn't log in. To be clear, my whois information was fullly legally compliant, and I was happy to also update my namecheap profile, but when I sent them an email they didn't get back to with an resp…

That sounds more like a phishing attempt than anything a real company should send. I think I have one domain left with them. I haven't received anything yet, but it's a good reminder to move on.

> That sounds more like a phishing attempt than anything a real company should send.

And yet companies do it all the time. Which is hilarious because they also will happily tell you to beware of phishing and scams, but they do the exact same things a phisher/scammer would do

Re: Tell HN: Namecheap gave my account to an unverified third party

#48

Namecheap has been owned by a private equity firm for several months now. It would be nice to have a nonprofit registrar so jumping every few years isn't necessary.

...seriously? Where do I jump ship to now?

I've been a happy customer of https://njal.la/ for years

Re: Tell HN: Namecheap gave my account to an unverified third party

#50

Namecheap forces users to log in to identify themselves. So far, OK. But then when one attempts to pay for a domain, after one has already provided all of one's credit card information to Namecheap ... Namecheap up and refers its customers to something called Link, which forces Namecheap's customers to create an account and become Link's customers - providing all that confidential credit card information, all over -…

Link is just payments processing done by Stripe.

https://stripe.com/payments/link

If you've bought anything online recently, especially if it's not obvious who's collecting the payment details or it looks like first party on the checkout page, you've probably used Stripe.

Post reply on HN