Fundamental mistake at DynaDot – Gain Access to Domains at DynaDot!
DynaDot, a registrar of about 55,000 domains, apparently has a very skimpy security system. I was managing a domain of mine when I decided to experiment with the URL. I found that you can get any domain you want, with a few clicks.
Seriously… 55,000 domains registered and they have such a fundamental security mistake as this? I could probably feel sorry for them if they had a JavaScript exploit or a 1000 character hack in the URL… but switching the ID number of the registered domain and gaining complete access? That’s just stupidity.
DynaDot coders – for shame.
If you enjoyed this post:
Please take the time to leave a comment with any of your thoughts, follow me on Twitter or subscribe to my RSS Feed for automatic updates on all future posts.
There is 1 response to this post so far
-
Ross wrote:
