poopsintub Twitter added two-factor authentication back in May. If you're constantly being attacked that you ignore important emails, at least add phone authentication. - You might want to read the post before you comment. He willingly gave the twitter to the hacker.
GoDaddy added two-factor authentication in December...Twitter almost a year ago, Facebook in 2011. Like I said, if he was under attack frequently that he just ignored security emails, you think turning on two-factor authentication would have been a pretty good idea on any one of those. He did none and wants to grab attention about a $50k twitter handle. This is what happens when you run with scissors.
Two factor is irrelevant when they will give up your account for just the last four card digits.
http://DNSimple.com for us. Their template system and support is fantastic.
I've heard good things about them from friends. This article was the last straw for me -- I just migrated my 90 domains off of GoDaddy. Actually, I didn't. I just told DNSimple to do all the work, via their (brilliant) concierge onboarding option: http://blog.dnsimple.com/2014/01/domain-transfer-concierge-s... "Here's my credit card and GoDaddy creds, guys, and here's a technical note about my DNS settings that I wan…
Was there anything in particular that made you migrate away from GoDaddy?
http://DNSimple.com for us. Their template system and support is fantastic.
I've heard good things about them from friends. This article was the last straw for me -- I just migrated my 90 domains off of GoDaddy. Actually, I didn't. I just told DNSimple to do all the work, via their (brilliant) concierge onboarding option: http://blog.dnsimple.com/2014/01/domain-transfer-concierge-s... "Here's my credit card and GoDaddy creds, guys, and here's a technical note about my DNS settings that I wan…
I'm really surprised you were still on GoDaddy.. but good thing you moved away. And yes, sometimes small tasks like moving domains can feel like moving a mountain.
I've heard good things about them from friends. This article was the last straw for me -- I just migrated my 90 domains off of GoDaddy. Actually, I didn't. I just told DNSimple to do all the work, via their (brilliant) concierge onboarding option: http://blog.dnsimple.com/2014/01/domain-transfer-concierge-s... "Here's my credit card and GoDaddy creds, guys, and here's a technical note about my DNS settings that I wan…
That does sound really good. On the other hand, we're talking about security here, and, sadly, a company that has extra helpful support may be more easily socially engineered. The author's advice to use gmail.com addresses only works because Google basically has no customer support for gmail.com, so there's no one to social engineer!
This is, ironically, one of the reasons I feel more secure with their 3-man firm than with GoDaddy. GoDaddy has all the resources to put in place a well-architected ISOwhatever procedure with flow-charts, custom software, and government document review... and then fail at their one job. These guys, on the other hand, pretty much will be forced to having an actual human who knows me decide "Is this chap claiming to be Patrick really Patrick?" I feel really secure that a smart geek who has standing orders from me "I DON'T TRANSFER DOMAIN NAMES EVER." can reason out an ad hoc verification process which is much, much more likely to reject a fraudster than the GoDaddy CSR following the manual will be. (I mean, since they're two degrees of separation from me and our mutual friend is a business acquaintance well known to both of us, they could literally just call the friend and say "Someone is claiming to be Patrick and wants to transfer all his domains. You know that's a thermonuclear change since you're in this industry too. Call him and ask whether he knows about this. We'd both appreciate the favor. If he does we're good, if he doesn't, we're blocking this chump.")
Twitter's official policy is that an account becomes inactive after 6 months - at that point, they reserve the right to release the account (in practice they rarely do this, though - there isn't an automated job releasing inactive accounts or anything) https://support.twitter.com/articles/15362-inactive-account-... @N (now @N_is_stolen)'s last post was 4 months ago, so he is still technically considered an active use…
Activity doesn't require the creation of a tweet though. There are plenty of active accounts where the users just read.
Not logging in for months or years at a stretch counts, IMHO.
This is a scary story! Focusing on the Twitter handle sale part: I have the twitter handle @jetsetter, and have been offered multiple thousands of dollars for it (guess who!). Unfortunately, selling a twitter handle is against TOS. Only @israel has been officially allowed to transfer hands for money, that I'm aware of. So trying to broker the sale of a twitter account can allow the buyer to report your 'behavior' to…
> Only @israel has been officially allowed to transfer hands for money, that I'm aware of. Twitter: "I'm sorry, you can't do that." Israel: "What are you, some kind of Anti-semite!?!" Twitter: "OK, OK, go ahead and do what you want. See, we're not anti-semite :)"
Well at least you didn't make some bad pun involving Israel, jews and money....
Who are people's current favorite domain registrars? I've been with name.com for the last year or so and have been happy, but I'm always curios to hear from others.
http://DNSimple.com for us. Their template system and support is fantastic.
+1 DNSimple. 2FA and a truly simple interface. VERY easy templates for common things like blogs, email, etc. Really easy to get up and going on a domain there.
Seems like Twitter could easily verify the story based on their own logs and then restore access to his N account. He doesn't mention pursuing that, though.
(I work at twitter but don't have anything to do with account security, etc) I think something is in the works...