4 ms·
Likely an inside job. I had a similar experience with AWS where my account was compromised despite the fact that I had all the proper security features enabled.
by tedggh 6mo ago
Likely an inside job. I had a similar experience with AWS where my account was compromised despite the fact that I had all the proper security features enabled. It was later discovered internal contractors were responsible. But up to that point AWS blamed the issue on me with no proof. A call to the AG office in my state got the ball rolling and initiated an investigation that finally got a manager to take the case seriously.
- n_e 6mo agoThe explanation is at the end of the article: another GoDaddy customer asked for the transfer of a similar-looking domain name, and they transferred the wrong domain.
- gpm 6mo agoAnd then slow rolled support. And then flat out lied that they received "the correct" documentation justifying the transfer when they hadn't received any documentation, and denied the appeal. Frankly the whole thing is inexplicable. The best explanation is fraudulent business practices to save 60 seconds of looking for the documentation.
- nine_k 6mo agoWith all the publicity GoDaddy has received over the last 10 years or so, I wonder why anybody reasonable would deal with them any more. Maybe the prices are irresistibly low, IDK.
- 0_-_0 6mo agothey are not inexplicably low -- any rational person sees that any low prices are one year intro deals that revert to excessive after the first year. We have always hated working with them, and have moved all clients to cloudflare.
- gzread 6mo agoYou moved from the worst registrar to the second worst registrar. Cloudflare will call you up one day demanding an immediate payment of $150k and holding your domains hostage if you don't comply.
- kirubakaran 6mo agoThat's worrying. My search-fu is failing me. Link please.
- Silhouette 6mo agoCloudflare will call you up one day demanding an immediate payment of $150k and holding your domains hostage if you don't comply. [citation very much needed]
- vetrom 6mo agohttps://robindev.substack.com/p/cloudflare-took-down-our-website https://robindev.substack.com/p/cloudflare-took-down-our-web... - one of a number of citations. To find more insert the terms [Cloudflare, hostage] into your favorite search engine.
- Silhouette 6mo agoWhatever was really happening in that incident it seems clear that it was not a simple matter of having registered some domains with Cloudflare and then getting a shakedown for $100k+ because of that. If anyone else chooses to read the post then I suggest skimming the comments (that are mostly hidden by default) as well.
- vetrom 6mo agoThe point isnt the apologists that pop up whereever CF gets mentioned, the point is that they more or less have a built reputation for deceptive loss leader marketing. Maybe early/MVP product engineers should know better, but CFs own education materials do not teach you to expect that.
- boscillator 6mo agoThey show up as the #2 ad spot when you search "register a domain" and most people don't know any better.
- tedggh 6mo agoI was done with them the day I knew their founder and CEO bribed corrupt African governments to go kill elephants, pose for pictures and share them with family and friends. I hunt and fish, but there’s something particularly evil about spending a fortune to abuse broken systems in poor nations to go after one of the most social species on earth, which are also known for having a strong awareness of death.
- saddist0 6mo agoWhat are the good alternatives? In domain business, everyone like a service which has lived for decades. GoDaddy being the one helps a lot. I love Cloudflare for my .com domains but they don’t support a lot of TLDs till date.
- nine_k 6mo agoIf you prefer to use a service that's been around for a really long time, Network Solutions will happily sell you a domain! (Maybe Tucows, too; their domain-registering arm is now called OpenSRS, it appears.)
- _carbyau_ 6mo agoPorkbun.com Been around since 2015. You decide if that's long enough. For my extremely simple needs, the website is domain name magic for a plain customer wanting a plain service.
- nofriend 6mo agoThe bad publicity is all in tech spaces and they do ads IRL.
- merlindru 6mo agobut why? why would an insider put the wrong domain into a strangers account that has no interest in using the domain and went out of her way to give it back to the rightful owners?
- II2II 6mo agoIf I had to make a guess: the incorrect domain was transferred by mistake. Remember, the person who the domain was transferred to was trying to recover a domain. The employees went out of their way to avoid giving the domain back to the rightful owners because the individuals involved did not realize it was a mistake since the vast majority claims they receive about improperly transferred domains are people trying to hijack domains. Either their policies don't acknowledge exceptions, or employees were just trying to cover their ass in case the author was someone trying to hijack a domain. I certainly don't blame the author being upset and venting. I don't blame them for pointing out that there are problems with the dispute resolution process process. That said, I think they should also realize the registrar also has its own set of challenges to face. In this case, one of those challenges is to protect their customers from having their domain hijacked by a bad actor. The author's behavior most likely had those bad actor vibes, even if it was unintentional.
- mrgoldenbrown 6mo agoWhat about the authors' behavior justifies the lies about proper documentation for the transfer? There was no documentation. How does lying about documentation help protect anybody?
- jubilanti 6mo agoSounds like the kind of thing an LLM would do: find a random token towards the end of an input stream (similar domain in Susan's email signature), mangle it, then take that hallucination to be authoritative.
- amluto 6mo agoIf you read farther down, it’s obviously an inside job in the incompetent, not malicious, sense. Their employee did not do anything remotely resembling following procedures, misread an email to an outrageous degree, and transferred the wrong domain.
- Strom 6mo agoAs I read it I couldn't help but envision this being a simple case of LLM-automated support going wrong. The mistakenly transferred domain was in the e-mail that asked for a transfer.
- theli0nheart 6mo agoThat doesn't make any sense. The entire reason it was undone is because the recipient told GoDaddy support that they transferred the wrong domain to her. So how could this have been an inside job?
- Ancapistani 6mo agoGoDaddy support was not involved in the resolution; the recipient contacted the domain’s legitimate owner directly.
- ronbenton 6mo agoI don’t think you read the article. GoDaddy transferred the domain to someone in a local chapter of the same organization. When that person realized what happened, they called the original owner and got everything fixed. There’s no way this is an “inside job” of any kind.
- IceDane 6mo agoHow about reading the article?
- sidewndr46 6mo agoHow well connected are you that you can call a politician to followup on a billing dispute?