
|
View Full Version : My sites 'hacker'
CritticAge 09-10-2002, 06:13 PM I posted before about someone deleting my site, well now I know -
support@namenerd.com says:
YOUR SUCH A STUPID ****
support@namenerd.com says:
WANT ME TO HACK YOUR SERVER AGAIN
support@namenerd.com says:
AND DELETE YOUR GAME
They/him did it by using my domain password.
I suspected this so I moved my domain name from them - now he is trying to get it back and then suspend it. The only way he could do this is because he bought it in return for a design.
I would never use NameNerd again and I hope no one does!
Pilgrim 09-10-2002, 06:44 PM Hang on, let me get this straight....
Your DOMAIN REGISTRAR hacked your website?
Christ what is the world coming to these days :rolleyes:
2host.com 09-10-2002, 06:50 PM It's probably not a good idea to make comments like that based on just one post with one person's claims. We didn't see the headers of the emails. Someone could have compromised the account and done this, but that same person could have just faked emails to make it look like it was the provider in question. This post really needs more information included to have it be justified when naming a company as committing such an act.
benoire 09-10-2002, 06:59 PM I think the post was quoting an msn discussion not an email in which case I guess he had spoken to this person before and hence had no doubt about their authenticity.
That said, you are still quite right in saying that more information is really needed so people can make a justified decision based on this issue.
2host.com 09-10-2002, 07:04 PM A messenger chat too, doesn't mean anything. It could have been anyone. I really don't see a company blatantly admitting and taunting someone like that. It's likely some kid that found an easily guessed password and is just fooling around trying to taunt this person and mess with their site. Causing confusion to make someone think that it's their registrar is probably giving the person a good laugh. Sure, it's possible it is that company, but at this point I have doubts and there surely should be more proof posted that would show this is a fact. Emails, messaging services, and the like, don't really provide anything to prove it, unless it came from their IP and it wasn't spoofed. Perhaps we'll see.
benoire 09-10-2002, 07:40 PM You're right, I wasn't disagreeing with you :) Merely pointing out that as it was msn, it could be considered a little more reliable than email, although, like you say, by no means unequivocal (sp?) proof. Of course, it could all be a bunch of lies and the poster is merely trying to fudge a competitor or something (note: I'm not claiming this to be the case in this instance, merely pointing out the possiblity generally :))
I think he means that he used the same password for his domain name log in as for his actual site.
A BIG NO NO in my book!
I require that my mods or support people have unique passwords on my site(s) for this reason. Many people use the same password for the message boards that they join and webmail accounts which is so insecure.
I once saw a guy get his hotmail password hacked, and the hacker went to many of the mesage boards that he was a member of and posted more than an entire page of filthy titled threads in each forum.
Richard Ward 09-10-2002, 10:10 PM No sympathy points for double password usage on common entries. Better common sense next time around.
kerplunk 09-10-2002, 10:13 PM Hey Richard. Long time no see.
Home Net Web? Cool, man.
conceptual 09-10-2002, 10:16 PM Yea support@namenerd.com is a msn handle. I have a bad memory so I use the same passwords too.
Corn Cob 09-11-2002, 12:26 AM if it was the company than thats not sad - its a prime example of arrogance.
be careful. a lot of teenagers are starting up web companies and most of them cant be trusted to stand still.
CritticAge 09-11-2002, 12:35 AM Ok people.
Yes it was an MSN conversation and there is no doubt it was the owner (or co-owner but I believe it is all the same person - besides the point). How so? We talked about things only the person would know.
As for using double passwords, what sort of company would use your person information for anything, let alone using it to gain access to your web hosting account and remove all your work. I like to think I am pretty secure....but who would think a domain registra would do such a thing.
These are not false claims, I had a suspecion it was them/him when it happened, but as I could not be 100% sure, I did not say it.
2host.com 09-11-2002, 01:01 AM Originally posted by CritticAge
Ok people.
Yes it was an MSN conversation and there is no doubt it was the owner (or co-owner but I believe it is all the same person - besides the point). How so? We talked about things only the person would know.
Sounds like a good reason. Unfortunately if that's the case there's no way to prove it enough to give anyone reading this post enough information to stay clear of them.
As for using double passwords, what sort of company would use your person information for anything, let alone using it to gain access to your web hosting account and remove all your work. I like to think I am pretty secure....but who would think a domain registra would do such a thing.
The problem is, those sort of people do own companies, as you've experienced. You have reasons other than the company themselves using this information against you to not have used the same password. Other reasons are if their database is compromised or the like.
These are not false claims, I had a suspecion it was them/him when it happened, but as I could not be 100% sure, I did not say it.
But you've confirmed this in the original post? Did you report this? Are these people just some private OpenSRS reseller? I'm use only a known, non-private registrar. Although there are respectable and honest private resellers, you can't know what one's are and it's just never a good idea because of that. Also the fact that there's enough large registrars out there, they are just as cheap, why go through some reseller and risk it? Not just abuse, but any problems the reseller has, you have. Speaking of, this person, if it's them, since you have the domain through them, you best make sure they can't control the domain itself.
CritticAge 09-11-2002, 01:06 AM I only used them for domain registra because I got the domain in return for a design.
The person was the owner of ******** (probably going to be **** out when this is posted because he had to spam his site all of these forums).
*edit* Ypu it was *******'d out - T E R R A H O P
I wont use the same password twice for important things like hosting accounts ect, but really, who would of though they would do that?
2host.com 09-11-2002, 01:11 AM I would have thought of it. A lot of people don't, but this is one example of how people do and will use that information. Never, ever use the same password and never leave the passwords on any site or stored anywhere online. It reduces the risks significantly to where if some site, server, service or company is compromised, that you don't have everything or other things compromised. Sorry to hear this happened, I'd seek some assistance, if you need it, to stop and track these attempts and actions by this person. It should prove easy if they are messaging you themselves as well as altering your site.
CritticAge 09-11-2002, 01:43 AM Well I will lean from my mistake and move on. Not worth time. :cool:
faculty 09-11-2002, 01:57 AM Andy - Was this hacked again?
I remember last time.. but he did it again?!
Man.. you have to tell me these things so I can get his IP and ban his connection to AOL (that was what is was last time)..
You are right, that the creep shouldn't have done that. Especially for a person in business, to use your information in a malicious way. It was wrong, but the fact is, some people just do wrong things. Count on it. Reduce the temptation by not being an easy target. One of the first things hackers do is look for common passwords.
While we are at it, one must realise that some message board systems allow access to passwords to the moderators, so when you sign up on a message board, do NOT use the same one that you might use for a seemingly insignificant email account. Once they can get to your email account, they can gain other passwords as well.
Remember people are human, and on the internet, you don't always know who you are dealing with.
Another thing people do is tell a bit too much about themselves, and then forget about it. So do not make your password the name of your dog or kids ect. In fact, do not make it a word at all.
Personaly, I keep my passwords on 3 x 5 cards. (not on my computer) Because I have several sites, they are color coded per site. I lock the little 3 x 5 file box away in my fire safe, so if I can't remember a password, I have to get out my key, plus use the combination to get them. This still takes less time than it would to re-upload a site or rebuild a database.
CritticAge 09-12-2002, 01:37 AM So do not make your password the name of your dog or kids ect. In fact, do not make it a word at all.
Yeah, my password I do not even know without looking at a keyboard :)
I will start writing down my passwords on a piece of paper.
Thanks.
|