Registerfly account hacked?

[B33R]

Your Account userid [***userid removed***] was just accessed at 2006-11-14 by IP ADDRESS [66.246.72.40]

Further information is available via the reports section of the domain manager

www.RegisterFly.com

This just arrived, 2 days late, that's not my IP address/range and I don't even have any domains at regfly any more.

I have no idea how they got that password, fortunately it is a one-off, never used anywhere else, password. Not particularly easy to guess either, although it was kinda short.

Regfly login report confirms it - 2006-11-14 20:34:25 - Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322) - SUCCESS

Just a warning for y'all, be on the lookout for this. Never use the same password for different places and always use uppercase, lowercase and numbers!

 

[Dave_Z]

I'd like to welcome Mark aboard, too. And expect a bombardment of emails. :D

 

[stscac]

I'd like to welcome Mark aboard, too. And expect a bombardment of emails. :D

:lol: you meant hate mail, right?

-Steve

 

[IAmAllanShore]

Welcome, as well, and please understand that a thick skin might be needed at times
-Allan :gl:

 

[cache]

So, Mark
Is it true that they hacked the passwords?

 

[Albert]

So, Mark
Is it true that they hacked the passwords?

I want to know as well.

 

[weeds]

There are quite a few things I like about the way Registerfly does things. The ability to Restrict login to your RegisterFly.com account to a known IP Address or range is nice.

You should abide by the basic strong password rules:

• Should have a Upper case ALPHA
• Should have a lower case alpha
• Should have a number
• Should have a symbol
• Should be at least 8 characters long
• Should not be a license plate type word (1Luvc@t$)

Do not use domain controlling passwords on any other system or service.

Lastly, Trust no one!

 

[tricolorro]

W:oW 74000 accounts and passwords compromised.

Their site is down now too.
http://www.registerfly.com/

:hi:

Their site was down due to maintenance according to their Support person via phone.

The brains at RegFly do site maintenace during Prime Time evening hours while running their domain specials and without any notice.

Wonderfully managed and operated company. :td:

Patrick

 

[nombre]

i got one of those wierd ip addresses also, since i am transferring some domains out of those guys i assumed it was support doing their thing,
uh .... does registerfly have support guys in florida?

what a bummer

i can't get away from these guys fast enough

 

[tricolorro]

So, Mark
Is it true that they hacked the passwords?

:hi:

I contacted RegFly last week after seeing this thread startup
and RegFly assured me that their site was not hacked and no
one's account info or passwords were comprimised.

Considering that the hacking info was a month old I'm inclined to
believe them...this time.

Patrick

 

[Dave_Z]

:lol: you meant hate mail, right?

-Steve

Reminds me of a scene from Chicken Little:

"Your hate mail is full".

:hehe:

 

[B33R]

I contacted RegFly last week after seeing this thread startup
and RegFly assured me that their site was not hacked and no
one's account info or passwords were comprimised.

Considering that the hacking info was a month old I'm inclined to
believe them...this time.

That may be true but that's not what the thread was started for.

It was started because their staff are apparently going into accounts through the front door, allowing the "account accessed" email to be sent and effectively causing a panic, all because they're too useless/dumb to access the account in private like every other registrar I use does.

What sense does it make allowing their customers to believe that their account was hacked? Absolutely none, it's counterproductive, but it's exactly what I've come to expect from Regfly.

I think it'll take a miracle to turn around the company now and shake off their bad reputation.

 

[namey]

I think its time to move my domains from RegisterFly.

 

[Kenny]

Hi all,
I have just recently joined Registerfly as VP Sales and this is my first post. I spent 5 years working for Tucows so I am very knowledgeable on this industry with a strong believe in customer advocacy.
I will say that this concern is being fully investigated. Registerfly does everything possible to ensure the safety of its customers assets and the continuance of services they have purchased. Registerfly does from time to time do account checks to ensure the accounts are valid and contain accurate info so there may be additional confusion.
I would like to hear and discuss everyone's feedback on what we can do to improve your experience with Registerfly. Please email me [email protected] with your thoughts and experiences. I can tell you that we have an initiative already underway that will improve the overall customer experience in the next couple of months.

Hmmm, I guess we wore Paul V. out. :hehe: j/k
Is he still recovering from his surgery? He is a good man.

I don't envy you your job Mark, it will be a tough row to hoe...but Welcome to NamePros and lets hope a bunch of that Tucows exp rubs off on RegFly.

I expect you will be very popular very soon.

Peace,
Cyberian

 

[fonzie_007]

Thanks for this post. I go out of town over the weekend and come back to a scare. I've changed passwords as a precaution. I also appreciate Mark coming the forum and help answer questions. Mark, can you clarify exactly what happened?