.tv Totally Shocked by Enom.TV

[SKG]

Today I called Tech support at Enom.tv to inquire about how to operate and setup email to one of my premium domains and all they asked me was the name of my domain and we started chatting about my account.

I am totally floored by the security at Enom.tv! Like others I have so much invested in .TV that is kind of lack in security make we want to scream!! I now have to go through all the trouble to lock by passcode one domain after another to ensure my portfolio safety. I highly advise the rest you to do so as well. Too much monies are at stake and business dollars as well. What a class act :yell:

 

[RogueWriter]

As an aside, type the domain of one of your .tv web sites into the address bar. Then, click on 'sign in'. When you login, use small caps for your password. You will be logged in.

Now, do the exact same thing, only this time make sure your password is capitalized. You will again be logged in.

Their passwords are not case sensitive, which I think would be a rather easy thing to install. Case sensitive passwords double the amount of possibilities, making it just a tad bit more difficult for a hacker to break in.

JMO.

 

[BDM1]

Having major problems with them myself at the mo. we tried buying two premium names and had a credit card problem, due to many cards being flagged because we are in Asia.
called visa, no problem, we will unlock your card for that amount for 1 hour - great. Call enom, but no 24 hour service and had to wait till 2 am in the morning here to wait for the offcie to open.
then had to ring visa again to unlock again. called enom again and was on hold after pushing all those stupid connection line numbers and then got hold of some goose, who kept saying, bad line, bad line. called back, now it was clear and audable.
We went through our "problem" and quoted all the correct numbers etc and then he said again, so what is your problem, went through it again, he could not understand how to spell the names we wanted and they were as easy as cat.tv (eg).
10 minutes later, we are still on hold, he comes back and says, they are premium names, we will have to send you to that department - we went click!
They lost out on money and we never got our names.
The amount of money this company makes is sizeable, no 24 hour support is ridiculous, etc etc.

 

[athletec64]

maybe the phone number that you called them with matched the whois info on your domain?

 

[Pred]

Enom have always had these huge security flaws & they're not bothered. It always amazes me how many experienced domainers insist on using them.
Think of the poor guy you sell one of your names to? If you felt inclined you could sell & then take back by entering individual password, if you were criminally minded.
I've always wanted to see enom sink like registerfly. Funny how they were in bed together, of sorts.
Wish you luck with those jokers

 

[TheBulldog]

That is why, no offense, the ONLY names I register there are the ones I know I will use the me.tv tools with. And I use a temprorary credit card number from PayPal for the transactions.

After reading some of the previous problems, I just can't see trusting them 100%.

 

[rodash]

After I read this I did a quick check-in with registrars I have used and this is what I discovered:

REGISTRARS/DOMAIN AUCTIONEERS WHO DON'T EMPLOY CASE-SENSITIVE PASSWORDS

Moniker
Enom.tv
Enom.com
BulkRegister
Channelme.tv

REGISTRARS/DOMAIN AUCTIONEERS WHO DO EMPLOY CASE-SENSITIVE PASSWORDS

GoDaddy
MyDomains.com
CenturyDomains.com
Sedo
Afternic
DomainSite.com

I find it troubling that small registrars like MyDomains.com and DomainSite.com can implement case-sensitive password procedures yet the world's second biggest registrar, Enom, won't put in in place on its four sites.

As an aside, type the domain of one of your .tv web sites into the address bar. Then, click on 'sign in'. When you login, use small caps for your password. You will be logged in.

Now, do the exact same thing, only this time make sure your password is capitalized. You will again be logged in.

Their passwords are not case sensitive, which I think would be a rather easy thing to install. Case sensitive passwords double the amount of possibilities, making it just a tad bit more difficult for a hacker to break in.

JMO.

 

[SKG]

Arnie and Showbiz,

The problem is that you do not have a choice but to use Enom.tv if you want to own a Premium .TV domain since Enom.tv is the only place to buy it. It cannot leave that registrar.

 

[RPK]

That's one of the reasons I love CenturyDomains.com so much, but you also can't beat the $25.00/year price with enom.tv also I like the extremely easy push to other enom account holders.

 

[TheBulldog]

Sanchay, that is correct, but I am no longer buying premiums, so I don't care to use enom.tv. All I am doing is aftermarket or the (cue ominous muisic) dreaded hand-reg's of doom.

 

[RogueWriter]

......... or the (cue ominous muisic) dreaded hand-reg's of doom.

Great visualization, lol.

 

[NP02139]

After I read this I did a quick check-in with registrars I have used and this is what I discovered:

REGISTRARS/DOMAIN AUCTIONEERS WHO DON'T EMPLOY CASE-SENSITIVE PASSWORDS

Moniker
Enom.tv
Enom.com
BulkRegister
Channelme.tv

REGISTRARS/DOMAIN AUCTIONEERS WHO DO EMPLOY CASE-SENSITIVE PASSWORDS

GoDaddy
MyDomains.com
CenturyDomains.com
Sedo
Afternic
DomainSite.com

I find it troubling that small registrars like MyDomains.com and DomainSite.com can implement case-sensitive password procedures yet the world's second biggest registrar, Enom, won't put in in place on its four sites.

This statement is false. I tried logging into my eNom.com and enom.tv account entering my password with a different case and was NOT able to log in.

I have not tested the others...

 

[TheBulldog]

I think he meant logging into your sites, not your account.

 

[woeger]

I just wrote to Moniker this morning (their CEO Monte) about this and I have received 2 E-mails, one from him saying they will look into it, and one from a tech saying that they have just implemented case sensative passwords as a result of my suggestion. That is another reason why I like Moniker, they have always replied fast to my concerns. They appear to be taking security very seriously. Here is the reply from them this morning:

"Hello Adam,

Thank you for the valuable feedback you provided regarding our password policies. We found your observations completely valid and agreed with your recommendation.
A few minutes ago we updated our system to enforce case-sensitive password verifications.

The Moniker Tech team thanks you for helping us improve our systems."

 

[RogueWriter]

This statement is false. I tried logging into my eNom.com and enom.tv account entering my password with a different case and was NOT able to log in.

I have not tested the others...

In my specific case, I am referring to the actual web site/me.tv tools. If you have a .TV that uses the tools, then at the top right corner of your web site you will have a sign in hyperlink. Click on that, and try logging in with caps on and caps off. You will gain access to your site with both trys.

 

[NP02139]

In my specific case, I am referring to the actual web site/me.tv tools. If you have a .TV that uses the tools, then at the top right corner of your web site you will have a sign in hyperlink. Click on that, and try logging in with caps on and caps off. You will gain access to your site with both trys.

I gathered that might be what you meant, but what you wrote is much different.

While I don't think it's great, there a HUGE difference in not having the password case sensitive on ME.TV where the worst damage you can do is alter a .TV channel (not even alter the domain name) and an actual REGISTRAR account. (where pw's are case sensitive)

 

[RogueWriter]

I gathered that might be what you meant, but what you wrote is much different.

That's what I wrote about in both my posts, that's why I said, 'As an aside', meaning, kind of different but related.

I have not tried my account itself at enom.tv, but am glad to hear it is case sensitive.

 

[NP02139]

That's what I wrote about in both my posts, that's why I said, 'As an aside', meaning, kind of different but related.

I have not tried my account itself at enom.tv, but am glad to hear it is case sensitive.

Sorry Roguewriter, I see now that you were just referring to me.tv. I got your reply confused with Rodash.

 

[athletec64]

Awesome, nice to see moniker be so responsive and caring.

I just wrote to Moniker this morning (their CEO Monte) about this and I have received 2 E-mails, one from him saying they will look into it, and one from a tech saying that they have just implemented case sensative passwords as a result of my suggestion. That is another reason why I like Moniker, they have always replied fast to my concerns. They appear to be taking security very seriously. Here is the reply from them this morning:

"Hello Adam,

Thank you for the valuable feedback you provided regarding our password policies. We found your observations completely valid and agreed with your recommendation.
A few minutes ago we updated our system to enforce case-sensitive password verifications.

The Moniker Tech team thanks you for helping us improve our systems."