4 ms·
Teddy, I'm a Namecheap user (over 30 domains and a bunch of SSLs) and what really concerns me is that I find out about this security issue via hacker news, inst
by antr 12y ago
Teddy, I'm a Namecheap user (over 30 domains and a bunch of SSLs) and what really concerns me is that I find out about this security issue via hacker news, instead of being sent an email. This is not how you communicate with customers when these types of security issues arise.
- ted0 12y agoWe take these issues very seriously and always try to get the word out about as quickly as possible. We emailed everyone that was affected this morning and continue to update our customers through our blog and social media.
- jtheory 12y agoAgreed -- it would be a great service to customers without 2FA enabled to inform them all directly that this is in-progress, not just the ones whose accounts have already been successfully accessed. I know you wouldn't want to provoke panicked overreactions, or risk customers thinking that this indicates a flaw in NameCheap's security, but direct contact is essential for this kind of ongoing attack. > continue to update our customers through our blog and social media I'm not sure what percentage of your customers this will actually reach, but surely not a majority (certainly not me, anyway).
- inopinatus 12y agoYou should have no such expectation. This isn't a namecheap-specific security issue - they are reporting their perspective of a global security issue.
- michaelbuckbee 12y agoThey are reporting a specific attack on Namecheap accounts based upon a previous attack.
- inopinatus 12y agoWhich is not something people should expect an email about. At last count, I have several hundred logins with various online services. I do not want a note every time one of them is subject to a dictionary attack, no matter the scale.