3 ms·

I am not concerned about a government stealing my domain. I am more concerned about a hacker stealing it by social engineering their way into my account with my

I am not concerned about a government stealing my domain. I am more concerned about a hacker stealing it by social engineering their way into my account with my registrar and transferring it away or modifying the nameservers. With my perfect registrar, I'd be able to log into my account and check a box which says "Notify and delay all changes by 24 hours". So that even if somebody does get access to my account, if they try to transfer the domain away, an email/sms will immediately be sent to me to warn of the event, and the transfer wont begin until 24 hours later, giving me time to prevent it. Also, actions such as changing the account email address or phone number or the domains nameservers, or unchecking that "Notify" box, would also be subject to a 24 hour delay, and a notification. Also, I'd get a notification whenever a login occurred in my account from a new previously unseen IP address. Also, it would have 2FA, but that goes without saying.

zhte415 13y ago
There are services that do something like this. Mark Monitor springs to mind as one of the major ones, with a lot of complimentary services too: https://www.markmonitor.com/services/domain-management.php https://www.markmonitor.com/services/domain-management.php I doubt they are cheap. I'm sure others HNers could weigh in with alternatives.
- hackuser 13y ago
  Wasn't Facebook's domain, or at least their whois record, hacked via Mark Monitor in February? At least that was the initial report; I'm not sure what happened and it's hard to find a credible source about it. Here's the best I found in a short search: http://thenextweb.com/facebook/2014/02/06/uh-oh-syrian-electronic-army-meddling-facebooks-domain/ http://thenextweb.com/facebook/2014/02/06/uh-oh-syrian-elect... Of course if it was hacked it wasn't necessarily Mark Monitor's fault; it could be Facebook's (though good security would anticipate that some customers will have poor security).

zhte415 13y ago

There are services that do something like this. Mark Monitor springs to mind as one of the major ones, with a lot of complimentary services too: https://www.markmonitor.com/services/domain-management.php https://www.markmonitor.com/services/domain-management.php I doubt they are cheap. I'm sure others HNers could weigh in with alternatives.

hackuser 13y ago
Wasn't Facebook's domain, or at least their whois record, hacked via Mark Monitor in February? At least that was the initial report; I'm not sure what happened and it's hard to find a credible source about it. Here's the best I found in a short search: http://thenextweb.com/facebook/2014/02/06/uh-oh-syrian-electronic-army-meddling-facebooks-domain/ http://thenextweb.com/facebook/2014/02/06/uh-oh-syrian-elect... Of course if it was hacked it wasn't necessarily Mark Monitor's fault; it could be Facebook's (though good security would anticipate that some customers will have poor security).