5 ms·

Just got this classy spam from dyn.com. Wonder if they're going through this list emailing every domain contact. > As you may be aware, Cloudflare incurred a s

by r1ch 10y ago

Just got this classy spam from dyn.com. Wonder if they're going through this list emailing every domain contact. > As you may be aware, Cloudflare incurred a security breach where user data from 3,400 websites was leaked and cached by search engines as a result of a bug. Sites affected included major ones like Uber, Fitbit, and OKCupid. > Cloudflare has admitted that the breach occurred, but Ormandy and other security researchers believe the company is underplaying the severity of the incident … > This incident sheds light and underlines the vulnerability of Cloudflare's network. Right now you could be at continued risk for security and network problems. Here at Dyn, we would like to extend a helpful hand in the event that your network infrastructure has been impacted by today's security breach or if the latest news has you rethinking your relationship with Cloudflare. > Let me know if you would be interested in having a conversation about Dyn's DNS & Internet performance solutions. > I look forward to hearing back from you.

IgorPartola 10y ago
It's clever but feels at least a 3/10 shitty. Dyn is an old company and back in the day they provided free subdomains while nobody else did. I haven't used them recently because their pricing seems so high. How do others feel about them?
- OraclesDyn388 10y ago
  With Oracle announcing they're buying Dyn, I'm "voting with my wallet" and moving off them. I'm small potatoes compared to Netflix or other big dogs that use them.
- r1ch 10y ago
  I still have a lifetime standard DNS subscription with them from back in the day when they were dyndns.org and you could physically mail them cash. The DNS hosting has been very solid (except for the day Mirai took them offline) but the standard query limits are way too low for any moderately trafficked website. All the managed DNS providers I looked at seem to have very restrictive query limits without a "enterprise - contact us" plan, one of the reasons why I decided to just do DNS-only on Cloudflare.
  - ticoombs 10y ago
    Why not he.net?
    - r1ch 10y ago
      I use he.net DNS quite a lot for personal projects. I've had a few instances where DNS was not resolving that make me a bit cautious to move larger sites onto their service.
- fencepost 10y ago
  > I haven't used them recently because their pricing seems so high. How do others feel about them? I feel about them that the free dynamic DNS option with a Namecheap registration offers everything Dyn did except built in options on cheap home routers.
- Gigablah 10y ago
  A few years ago I had Dyn hosting my DNS records for a website that had Amazon affiliate links. For some reason, one day someone at Amazon mistook those links for spam and contacted a service called MarkMonitor. MarkMonitor contacted Dyn and Dyn took down my account, shutting off access to the website. Without ever contacting me. I was able to get my account reinstated after clearing the whole thing up with MarkMonitor and Amazon. I then removed all affiliate links and moved my DNS hosting elsewhere. Never using Dyn again.
cknight 10y ago
I suppose it could be seen as a response in kind after: https://blog.cloudflare.com/dyn-issues-affecting-joint-customers/ https://blog.cloudflare.com/dyn-issues-affecting-joint-custo... I would consider an email a bit of an escalation though, as opposed to a blog post.
- snug 10y ago
  The DYN attack affected Cloudflare customers, and we received a lot of support tickets that day. The blog post was more than warranted. The CEO and managers made sure the sales people weren't scummy in their tactics.
  - nicolas_t 10y ago
    See the message I received as a Dyn customer... The sales people were scummy in their tactics.
    - snug 10y ago
      I don't think the Cloudflare message is nearly as scummy as the Dyn messaging. Dyn makes it seem like the entire underlying tech at Cloudflare is vulnerable. P.S. I no longer work at Cloudflare, so I don't really care, just my .02
- wyuenho 10y ago
  It may not be clear on that blog post, but internally, management stressed on multiple occasions immediately after the dyn incident to "don't be an asshole".
  - cknight 10y ago
    I've made no claim that Cloudflare did anything wrong with that blog post. I can however see how Dyn themselves might not have liked it all that much. And in saying so, I think both the content and medium that Dyn chose in r1ch's post might be further contextualised.
deleted 10y ago
[deleted]
IveStopped 10y ago
Sorry bout that. Wasn't really even my idea, either.
b1naryth1ef 10y ago
Coming from a company that regularly goes down to DDoS attacks :thinking:
- paulddraper 10y ago
  Do you have any time in mind other than 2016-10-21?
user5994461 10y ago
They are strong competitors to each other, don't trust a word they say.
paulddraper 10y ago
I no great fan of Dyn, but I spend all day hearing "security is important", that my users and enterprises require security, and that I should do X, Y, and Z for security. If Dyn delivers where Cloudflare does not....it's not something that can be ignored out of hand. Maybe Dyn's email was rude maybe it wasn't, but I think perpetually too few people make real decisions based on security, and I'm a little forgiving of pushes in the other direction.
- kazagistar 10y ago
  Is there some hard reason to believe that this kind of bug cannot happen on the Dyn stack? If all they have is "we got lucky, pick us instead" then they are just being scummy.
nicolas_t 10y ago
Here's the email I got from Cloudflare as a Dyn customer during the DDOS attacks: > "As I'm sure you're aware, DDoS attacks on Dyn's network have caused massive outages for millions of sites. This prompted me to reach out on the behalf of Cloudflare to see if we can be helpful. > Over the last 24 hours, we've been helping other Dyn customers migrate to Cloudflare to mitigate the risk. > Who on your team would be the correct person to explore this with?" It's not much better.
- corobo 10y ago
  I think it's a bit more forgivable if they did it in response to this message. A good blend of cheeky and poking with a stick.

by r1ch 10y ago

IgorPartola 10y ago

It's clever but feels at least a 3/10 shitty. Dyn is an old company and back in the day they provided free subdomains while nobody else did. I haven't used them recently because their pricing seems so high. How do others feel about them?

OraclesDyn388 10y ago
With Oracle announcing they're buying Dyn, I'm "voting with my wallet" and moving off them. I'm small potatoes compared to Netflix or other big dogs that use them.
r1ch 10y ago
I still have a lifetime standard DNS subscription with them from back in the day when they were dyndns.org and you could physically mail them cash. The DNS hosting has been very solid (except for the day Mirai took them offline) but the standard query limits are way too low for any moderately trafficked website. All the managed DNS providers I looked at seem to have very restrictive query limits without a "enterprise - contact us" plan, one of the reasons why I decided to just do DNS-only on Cloudflare.
- ticoombs 10y ago
  Why not he.net?
  - r1ch 10y ago
    I use he.net DNS quite a lot for personal projects. I've had a few instances where DNS was not resolving that make me a bit cautious to move larger sites onto their service.
fencepost 10y ago
> I haven't used them recently because their pricing seems so high. How do others feel about them? I feel about them that the free dynamic DNS option with a Namecheap registration offers everything Dyn did except built in options on cheap home routers.
Gigablah 10y ago
A few years ago I had Dyn hosting my DNS records for a website that had Amazon affiliate links. For some reason, one day someone at Amazon mistook those links for spam and contacted a service called MarkMonitor. MarkMonitor contacted Dyn and Dyn took down my account, shutting off access to the website. Without ever contacting me. I was able to get my account reinstated after clearing the whole thing up with MarkMonitor and Amazon. I then removed all affiliate links and moved my DNS hosting elsewhere. Never using Dyn again.

cknight 10y ago

I suppose it could be seen as a response in kind after: https://blog.cloudflare.com/dyn-issues-affecting-joint-customers/ https://blog.cloudflare.com/dyn-issues-affecting-joint-custo... I would consider an email a bit of an escalation though, as opposed to a blog post.

snug 10y ago
The DYN attack affected Cloudflare customers, and we received a lot of support tickets that day. The blog post was more than warranted. The CEO and managers made sure the sales people weren't scummy in their tactics.
- nicolas_t 10y ago
  See the message I received as a Dyn customer... The sales people were scummy in their tactics.
  - snug 10y ago
    I don't think the Cloudflare message is nearly as scummy as the Dyn messaging. Dyn makes it seem like the entire underlying tech at Cloudflare is vulnerable. P.S. I no longer work at Cloudflare, so I don't really care, just my .02
wyuenho 10y ago
It may not be clear on that blog post, but internally, management stressed on multiple occasions immediately after the dyn incident to "don't be an asshole".
- cknight 10y ago
  I've made no claim that Cloudflare did anything wrong with that blog post. I can however see how Dyn themselves might not have liked it all that much. And in saying so, I think both the content and medium that Dyn chose in r1ch's post might be further contextualised.

deleted 10y ago

[deleted]

IveStopped 10y ago

Sorry bout that. Wasn't really even my idea, either.

b1naryth1ef 10y ago

Coming from a company that regularly goes down to DDoS attacks :thinking:

paulddraper 10y ago
Do you have any time in mind other than 2016-10-21?

user5994461 10y ago

They are strong competitors to each other, don't trust a word they say.

paulddraper 10y ago

I no great fan of Dyn, but I spend all day hearing "security is important", that my users and enterprises require security, and that I should do X, Y, and Z for security. If Dyn delivers where Cloudflare does not....it's not something that can be ignored out of hand. Maybe Dyn's email was rude maybe it wasn't, but I think perpetually too few people make real decisions based on security, and I'm a little forgiving of pushes in the other direction.

kazagistar 10y ago
Is there some hard reason to believe that this kind of bug cannot happen on the Dyn stack? If all they have is "we got lucky, pick us instead" then they are just being scummy.

nicolas_t 10y ago

Here's the email I got from Cloudflare as a Dyn customer during the DDOS attacks: > "As I'm sure you're aware, DDoS attacks on Dyn's network have caused massive outages for millions of sites. This prompted me to reach out on the behalf of Cloudflare to see if we can be helpful. > Over the last 24 hours, we've been helping other Dyn customers migrate to Cloudflare to mitigate the risk. > Who on your team would be the correct person to explore this with?" It's not much better.

corobo 10y ago
I think it's a bit more forgivable if they did it in response to this message. A good blend of cheeky and poking with a stick.