A few months ago, NamePros started observing aggressive credential stuffing attacks. This marked a new chapter in security at NamePros. We have rather secure infrastructure, especially for a site of our size. However, we've been growing at a steady pace, which makes us a bigger target.
The...
It's long been suspected that registrars may be registering domain names as customers search for them. Whether or not this is true, there's really no reason to be handing potential competitors your list of wanted domain names.
As a domainer, you're probably somewhat familiar with two useful...
NamePros is observing an increase in credential stuffing attacks targeting domain investors. This is a semi-regular occurrence. It typically works as follows:
An arbitrary website in the domaining industry is compromised. Typically, we have no way of knowing which site it was.
The username...
I'm disappointed that I need to taint such a positive thread with a reminder of this nature, but:
If you think it's appropriate or professional to gang up on community members here, throwing around nothing but personal attacks and conspiracy theories about generative AI, you're going to be...
How many domainers does it take to save a drowning man? Three:
One to say he was conservative and therefore had it coming
One to say a liberal pushed him into the water
One to tell the other two to knock it off
He still drowns.
Unless you have new, useful information to share in order to...
Since we're continuing to see political arguments in this thread, let's get one thing straight: Anonymous is a movement that favors chaos. It's a loose collection of people who believe they have transcended morals, religion, and politics, and they do not care what ideological stance they take...
DNS Flag Day is February 1, 2019--that's just two weeks one week from today. If your domain names use DNS servers that aren't ready, they'll be slow or entirely unavailable to a large percentage of the internet.
If you have multiple domain names with the same nameservers, you only need to test...
When you own online assets, security is particularly important. Think about it: what would happen if every web account you own was suddenly under someone else's control? Most people don't realize just how catastrophic that would be until it's too late.
Recently, the number of domainers...
Once again, enough with the flame wars. People are busy trying to figure out how to respond; they don't want to read through pages of the same arguments that have been taking place for years--it's not helpful.
Our development team was in overdrive for about a month. I was working 18-hour days on a regular basis to ensure everything went smoothly. During that time, we migrated the site to temporary infrastructure optimized for the upgrade, and the code running the website was swapped out--the visual...
We'd rather this not turn into that sort of thread. There's going to be no shortage of such discussion taking place elsewhere, but NamePros is focused on domain investing. Many of our members are worried that their life's work may now be in jeopardy as a result of this incident.
I know Epik...
At NamePros, we've noticed quite a bit of controversy in the industry lately. Everyone always seems to be fighting about small, green pieces of paper, or other inconsequential matters like who should be the next president. We wondered: is there a solution to the chaos? Could we be the ones to...
We’re trying to avoid making the same behind-the-scenes mistakes that other landing services have made. In order to remain free, we need to keep infrastructure costs down while still handling the same level of traffic that other services handle.
Throughout the development of this service, we’ve...
You are expected to tolerate other races, religions, and cultures here, full stop. You definitely can't accuse entire peoples of anything based on their race, religion, or culture. You don't have to like what a religion preaches or what a subset of those people do, but you're here to buy and...
@Rob Monster, my duty is, first and foremost, to the NamePros community. As a security professional, I am skilled in analyzing breaches and am qualified to offer my opinions on the matter. That is my job.
I fully understand that this is not an easy situation for you to be in, but I have an...
I want to make it very clear at this point that we will not be permitting personal attacks against researchers. Whatever you may think of Epik, there was an immense degree of irresponsibility here, and it makes no sense for us to grant any degree of tolerance to personal attacks against the...
It does appear to be real. There's an awful lot of data and I don't have time to comb through it all right now, but here's what I've seen so far for Anonymize users, which is a smaller, more approachable dataset than the registrar data:
Passwords hashed with MD5
Plaintext passwords (appears to...
There has not been silence, nor will there be. @Bravo Mod Team has been providing frequent responses to questions here and will continue to do so. I need to focus my attention elsewhere, or the issues you have raised will take longer to address.
Our old forum software was discontinued several years ago. We were maintaining it on our own during that time, but it significantly slowed the rate at which we were able to fix bugs and introduce new features. It also meant that maintaining security was increasingly time-consuming.
The...
The lapses in security were reportedly brought directly to his attention on multiple occasions, including once by me. He was made aware that his team wasn't doing their job and does not appear to have reacted appropriately.
As an industry, we need to make it clear that ignorance is not an...