Comments on: Godaddy Security Hole – Are Your Domains Safe http://www.dnxpert.com/2010/02/08/godaddy-security-hole-are-your-domains-safe/ A blog about the domain name industry Wed, 08 Feb 2012 15:02:34 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: admin http://www.dnxpert.com/2010/02/08/godaddy-security-hole-are-your-domains-safe/comment-page-1/#comment-7786 admin Tue, 09 Feb 2010 22:23:41 +0000 http://www.dnxpert.com/?p=2637#comment-7786 Jeremy, you are right on both counts. John Jeremy, you are right on both counts.

John

]]> By: Jeremy http://www.dnxpert.com/2010/02/08/godaddy-security-hole-are-your-domains-safe/comment-page-1/#comment-7785 Jeremy Tue, 09 Feb 2010 18:14:51 +0000 http://www.dnxpert.com/?p=2637#comment-7785 Hi John, It also requires that you know the exact physical address associated with the account. This does not have to be the same address on your WHOIS records. I use a PO Box on my WHOIS contact info and a physical address for the actual billing. While a determined party could find that info, I would still receive the transfer request notice and be able to deny it. If they changed the contact info I would be notified of that as well and be able to take action. Still, I do agree, it shouldn't be that easy. GD sends so many emails it's easy to miss one if you're away from email for a few days. Hi John,

It also requires that you know the exact physical address associated with the account. This does not have to be the same address on your WHOIS records. I use a PO Box on my WHOIS contact info and a physical address for the actual billing. While a determined party could find that info, I would still receive the transfer request notice and be able to deny it. If they changed the contact info I would be notified of that as well and be able to take action.

Still, I do agree, it shouldn’t be that easy. GD sends so many emails it’s easy to miss one if you’re away from email for a few days.

]]> By: admin http://www.dnxpert.com/2010/02/08/godaddy-security-hole-are-your-domains-safe/comment-page-1/#comment-7784 admin Tue, 09 Feb 2010 13:55:08 +0000 http://www.dnxpert.com/?p=2637#comment-7784 Hi Kate, The problem is not with the Reset Password feature. It is with the Password Hint feature. John Hi Kate,

The problem is not with the Reset Password feature. It is with the Password Hint feature.

John

]]> By: Kate http://www.dnxpert.com/2010/02/08/godaddy-security-hole-are-your-domains-safe/comment-page-1/#comment-7783 Kate Tue, 09 Feb 2010 12:21:21 +0000 http://www.dnxpert.com/?p=2637#comment-7783 So I tried to reset my password and it says: "An email with the requested information has been sent!" I indeed received an E-mail with a link to follow in order to reset the password. Until I do that the current password remains unchanged. No password was revealed, at least not for me. So I tried to reset my password and it says:
“An email with the requested information has been sent!”

I indeed received an E-mail with a link to follow in order to reset the password. Until I do that the current password remains unchanged.

No password was revealed, at least not for me.

]]> By: Masrur http://www.dnxpert.com/2010/02/08/godaddy-security-hole-are-your-domains-safe/comment-page-1/#comment-7782 Masrur Tue, 09 Feb 2010 12:14:58 +0000 http://www.dnxpert.com/?p=2637#comment-7782 I already get troubled with Godaddy because of how easy to reveal my account to the hackers. But, thanks to God that the Godaddy help me to taken back all the domains that the thief take.. Now, I'm thinking to move or stay with Godaddy... I already get troubled with Godaddy because of how easy to reveal my account to the hackers.

But, thanks to God that the Godaddy help me to taken back all the domains that the thief take..

Now, I’m thinking to move or stay with Godaddy…

]]> By: admin http://www.dnxpert.com/2010/02/08/godaddy-security-hole-are-your-domains-safe/comment-page-1/#comment-7781 admin Tue, 09 Feb 2010 12:03:29 +0000 http://www.dnxpert.com/?p=2637#comment-7781 I don't think you understood the problem Kate. If I transfer a domain name to you, I will have your customer number and email address. I will also have your full name which means I will have enough information to look for you on Facebook or Linked In in order to find more information about you. The Godaddy password hint system only asks for your customer number before it gives out the password hint on screen, right there... To me at least, this is a concern. I don’t think you understood the problem Kate.

If I transfer a domain name to you, I will have your customer number and email address. I will also have your full name which means I will have enough information to look for you on Facebook or Linked In in order to find more information about you.

The Godaddy password hint system only asks for your customer number before it gives out the password hint on screen, right there…

To me at least, this is a concern.

]]> By: Kate http://www.dnxpert.com/2010/02/08/godaddy-security-hole-are-your-domains-safe/comment-page-1/#comment-7780 Kate Tue, 09 Feb 2010 11:43:26 +0000 http://www.dnxpert.com/?p=2637#comment-7780 Hmmm... You still need: Customer Number + Email Address on Account Not as simple. I assume the new password will be sent to the E-mail address on record, so you need to have access to the E-mail as well. Hmmm… You still need:
Customer Number + Email Address on Account

Not as simple.
I assume the new password will be sent to the E-mail address on record, so you need to have access to the E-mail as well.

]]>