Jamie Huskisson » dynadot http://www.jhuskisson.com Nottingham UK PHP, Magento, Wordpress freelance developer Mon, 19 Dec 2011 10:57:18 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 DynaDot fights back, bans Nick from everything..http://www.jhuskisson.com/friends/dynadot-fights-back-bans-nick-from-everything http://www.jhuskisson.com/friends/dynadot-fights-back-bans-nick-from-everything#comments Wed, 24 Jan 2007 08:25:24 +0000 Jamie Huskisson http://www.jhuskisson.com/friends/dynadot-fights-back-bans-nick-from-everything To quote Antonio:

A few weeks ago, Nick Berlette found an exploit on the DynaDot website and posted it on his blog.
Here’s what happened.

DynaDot sends a Cease and Desist to Nick’s hosting provider: screenshot here – link to hosting.

DynaDot sends a notice to GoDaddy, and his account is banned: screenshot here.

DynaDot sends a notice to Digg, his account is banned: (“invalid”), http://www.digg.com/register (check availability on “berlette” taken)

Nic’s blog is back up, post removed:

It’s amazing how far they went. But hey – I’d imagine he messed up their systems pretty bad considering it got to the front page of digg.

Digg this Story!

Tags: ,

Feel free to leave a comment on this post, I'd love to hear your thoughts. Follow me on Twitter, Like JHuskisson.com on Facebook

]]> http://www.jhuskisson.com/friends/dynadot-fights-back-bans-nick-from-everything/feed 4 Fundamental mistake at DynaDot – Gain Access to Domains at DynaDot!http://www.jhuskisson.com/dugg/fundamental-mistake-at-dynadot-gain-access-to-domains-at-dynadot http://www.jhuskisson.com/dugg/fundamental-mistake-at-dynadot-gain-access-to-domains-at-dynadot#comments Sun, 14 Jan 2007 23:32:59 +0000 Jamie Huskisson http://www.jhuskisson.com/dugg/fundamental-mistake-at-dynadot-gain-access-to-domains-at-dynadot

DynaDot, a registrar of about 55,000 domains, apparently has a very skimpy security system. I was managing a domain of mine when I decided to experiment with the URL. I found that you can get any domain you want, with a few clicks.

Original Link
Digg Link

Seriously… 55,000 domains registered and they have such a fundamental security mistake as this? I could probably feel sorry for them if they had a JavaScript exploit or a 1000 character hack in the URL… but switching the ID number of the registered domain and gaining complete access? That’s just stupidity.

DynaDot coders – for shame.

Tags: ,

Feel free to leave a comment on this post, I'd love to hear your thoughts. Follow me on Twitter, Like JHuskisson.com on Facebook

]]> http://www.jhuskisson.com/dugg/fundamental-mistake-at-dynadot-gain-access-to-domains-at-dynadot/feed 1