Thrashed

5 ms·

1. 1.▲
   by Thrashed 2mo ago

   I agree, it's not an excuse to hand over an account. I think that commenter was considering practical mitigations for a broken system, not necessarily absolving NC of responsibility had my WHOIS been public.
2. 2.▲
   by Thrashed 2mo ago

   Yeah the domain was/is locked. The domain wasn't transferred - the NC account that owned the domain was handed over. I also moved from Godaddy to NC. For me it was 2013 when GoDaddy supported SOPA.
3. 3.▲
   by Thrashed 2mo ago

   I think their point was that if WHOIS data were hidden, a password reset request that relied on providing the email address would've been impossible. But since NC's account management allows visitors to provide just a domain name
4. 4.▲
   by Thrashed 2mo ago

   Yes it was enabled but it's unclear to me how effective it would've been in this case. I attempted to login after support changed the password, but prior to the club president connecting with me. So I filed a support ticket that m
5. 5.▲
   by Thrashed 2mo ago

   I did have domain privacy enabled. NC allows people to initiate a password reset via username, email address, or domain name. I was a happy customer right up until this incident. And I certainly agree that due diligence is a must for someth
6. 6.▲
   Tell HN: Namecheap gave my account to an unverified third party

   498 points by Thrashed 2mo ago|177 comments