Live data from Hacker News

How I Lost My $50,000 Twitter Username

medium.com

161–170 of 394 posts

Re: How I Lost My $50,000 Twitter Username

#162
Why would a company ever ever ever accept 6 digits of a credit card number as a way to authenticate an identity??

Credit card numbers are not secure. Therefore, they should not ever be accepted as authentication. Especially only 6 digits of it! This is by far the most shocking part of this story. As if I needed another reason to despise GoDaddy.

[Edited to add] I would sure love to see a scarlet letter list of companies which allow such practices, so I can never use them.

Re: How I Lost My $50,000 Twitter Username

#163
post #149
post #52

Earlier quoted context omitted.

No. But I'd feel less bad for that person than someone who drove their Mercedes every day and had it stolen. Also, a Mercedes and a twitter handle (or domain name) aren't exactly the same thing as a twitter handle is a unique owner of a particular pice of the namespace. A better analogy would be an owner of a valuable piece of property who wasn't putting it to good use.

Good analogy. Another one is email. If you used an email address for personal conversations and commercial transactions, that should not entitle you to keep the email address. You should give your email address to another person that wants it. For example, I used one email for most of my life. But recently, I stopped using that email address, and have used another one due to wanting to boycott that company. Since I n…

You might want to mark up your sarcasm slightly better as people are already falling for it in other posts you made.

Poe's law and all that.

Re: How I Lost My $50,000 Twitter Username

#164
post #140
post #21

Earlier quoted context omitted.

He said he wasn't using it much. Thus, isn't he basically a squatter?

He's definitely a squatter. If you own something and you don't use it, you're a squatter. I own an old original Nintendo that I haven't used all year. That's why if someone comes into my house and takes it, it's my own fault.

I understand it was a sarcasm, but there's one difference between the two. A Twitter handle or a domain name is something unique as opposed to a game console of which there were millions of copies.

Re: How I Lost My $50,000 Twitter Username

#165
post #160
post #140

Earlier quoted context omitted.

He's definitely a squatter. If you own something and you don't use it, you're a squatter. I own an old original Nintendo that I haven't used all year. That's why if someone comes into my house and takes it, it's my own fault.

I tend to disagree: The right of ownership includes to right to use what you own in your own way.

The ownership of twitter namespace is Twitter's alone, not the user's

Re: How I Lost My $50,000 Twitter Username

#166

An interesting point made was to avoid using custom domains for the login emails, since a DNS takeover would compromise your accounts tied to that email.

I think that's missing the point a bit. Using gmail as your primary address will make you vulnerable to Google arbitrarily (or even justified) shutting down your access. We all heard stories about that.

What you should do, is make sure that you trust your registrar. Paypal sure have some questionable practises, but the real culprit in this story is clearly GoDaddy.

Re: How I Lost My $50,000 Twitter Username

#167
post #51

I found it interesting how open the attacker was about how they did it.

He probably wanted to brag to someone about how he did it. It just so happened to be his victim.

Or he felt a bit remorseful about the whole thing and figured that at least he could help the guy not getting caught in the same net again.

Re: How I Lost My $50,000 Twitter Username

#168

Everyone looks bad here, but I want to focus on Twitter. For me this case is yet another demonstration that Twitter sees its customers as advertisers and places low priority on the community. I pay Twitter nothing, and yet the service is valuable to me. So instead of continuously crippling the service in the name of goodness knows what, why not actually charge users for a premium experience. Things like customer serv…

Or look into alternatives in the microblogging space. What ever happened to Status.net/ostatus?

Re: How I Lost My $50,000 Twitter Username

#170
post #129
post #18

Who are people's current favorite domain registrars? I've been with name.com for the last year or so and have been happy, but I'm always curios to hear from others.

If you have a lot of domains (or willing to pay a premium), I am a huge fan of Fabulous.com. Good support, good pricing, my impression is fairly secure. They have an executive lock feature: Executive-lock (E-Lock) allows for the domain name to be frozen. This means that the domain name is: 1. Unable to be transferred out to another Registrar. 2. Unable to be pushed to another Fabulous account. 3. Unable to have chang…

Holy cow:

"If your portfolio generates US$750 a month or you are willing to transfer 750+ domains to Fabulous, please complete the form below."

That's a little out of my range though I'd be willing to pay a premium (how much of a premium?).

Post reply on HN