ATTN: Lock Your Domains - GoFuckYourself.com

p3rsian · 11-11-2004, 01:53 AM

http://yro.slashdot.org/yro/04/11/1...l?tid=95&tid=17

http://news.netcraft.com/archives/2...ome_easier.html

http://www.icann.org/transfers/policy-12jul04.htm

Quote:
Domain names could become easier to hijack as a change in domain transfer rules takes effect Friday. Under new rules set by the Internet Corporation for Assigned Names and Numbers (ICANN), domain transfer requests will be automatically approved in five days unless they are explicitly denied by the account owner. This is a change from current procedure, in which a domain's ownership and nameservers remain unchanged if there is no response to a transfer request.
This could mean trouble for domain owners who don't closely manage their records. Domains with incorrect e-mail addresses and outdated administrative contact information are at particular risk, as the domain's WHOIS database information will be used to inform domain owners of transfer requests. A non-response becomes the equivalent of answering "yes" to a transfer request, according to the ICANN policy change.

"Failure by the Registrar of Record to respond within five (5) calendar days to a notification from the Registry regarding a transfer request will result in a default 'approval' of the transfer," the new rules state. "In the event that a Transfer Contact listed in the Whois has not confirmed their request to transfer with the Registrar of Record and the Registrar of Record has not explicitly denied the transfer request, the default action will be that the Registrar of Record must allow the transfer to proceed."

p3rsian · 11-11-2004, 02:06 AM

is this real ? this was the 1st time i heard this so i posted it here

Dagwolf · 11-11-2004, 02:09 AM

I heard about it yesterday... I'm locking my domains right now.

Geez, as if we didn't have enough problems already...

OWNED · 11-11-2004, 02:10 AM

No, it's just a big Internet Troll.
Don't lock anything.

KRL · 11-11-2004, 02:10 AM

Quote:

Originally posted by p3rsian
is this real ? this was the 1st time i heard this so i posted it here

Yep real and makes you wonder.

kmanrox · 11-11-2004, 02:11 AM

this is very real.

beemk · 11-11-2004, 02:12 AM

i dont see anywhere for locked domains on directnic, are they already locked?

plyndrty · 11-11-2004, 02:18 AM

Quote:

Originally posted by p3rsian
is this real ? this was the 1st time i heard this so i posted it here

I had a few domains with one company then moved them. I got an e-mail from the first domain register asking if it was alright but the thing is if the domain e-mail address was not correct in the info, I would of never of seen the "ok to move e-mail" and it would of moved anyway after a no responce.

I look at my domains atleast 2 to 3 times a weeks

kmanrox · 11-11-2004, 02:20 AM

when does this come into effect?

i need to start requesting transfer of a bunch of y'alls domain i want...

LiveDose · 11-11-2004, 02:23 AM

Quote:

Originally posted by beemk
i dont see anywhere for locked domains on directnic, are they already locked?

customer settings. transfer security.

Dagwolf · 11-11-2004, 02:43 AM

I had all but 2 locked already so.. no biggie. :p

Gynecologist · 11-11-2004, 02:43 AM

People already trying to steal my doamins. Gottem all locked now.

Project-Shadow · 11-11-2004, 03:19 AM

Bump, dont wanna see people having their domains stolen..

beemk · 11-11-2004, 03:21 AM

Quote:

Originally posted by LiveDose
customer settings. transfer security.

awesome, thanks

erehwon · 11-11-2004, 03:28 AM

What pisses me off is Register.com has no domain locking feature, and won't have one in place for months.

I have a bunch of domains at GKG.net which is nearly five times cheaper than Register and they have domain locking and better spam protection.

If I lose a domain over this shit, someone at ICANN is going to get a major beatdown over this, I can't understand if its not broken, why fix it?

mkx · 11-11-2004, 03:48 AM

Does this mean that I can go around browsing multi thousand dollar domains fowarding to search portals with invalid contact emails and request a transfer?

I am going to lock all my directnic domains now. Good thing it's thursday and good think i found this post. I never got any email from Directnic about this though, are you sure it is not bogus?

This could cause a lot of problems for many domain owners.

I would concider this the same thing as being able to transfer the ownership of someones home or business by mailing them a letter and if they don't reply back within 5 days, you get it automatically. I don't think this is possible but I will read those 3 links for more info and lock all my domains.

mkx · 11-11-2004, 03:52 AM

"A transfer must not be allowed to proceed if no confirmation is received by the Gaining Registrar. The presumption in all cases will be that the Gaining Registrar has received and authenticated the transfer request made by a Transfer Contact. " http://www.icann.org/transfers/policy-12jul04.htm

mkx · 11-11-2004, 03:55 AM

Sorry for the triple post but I think your right

This was on my directnic security settings page

"Transfer Security Settings
High Security - *** Recommended: This will place all domains on lock status. Lock status will prevent any transfers from occurring. You may still transfer your domains, but you will need to first unlock the domains individually using the Domain Registry Status Manager link below.
Normal Security: This will automatically allow the transfer to select registrars, if neither of the notification emails is responded to within five days.
"

Does this become active tomorrow? What are some legal issues associated with sending transfers to unlocked domain names to take their domain if they don't reply?

V_RocKs · 11-11-2004, 04:00 AM

Almost makes you wonder if Bush is just an idiot or just a fucking clown.

Kelvin · 11-11-2004, 04:01 AM

Yup, this is for real.
It starts TOMORROW
Check out the top of godaddy.com

http://www.godaddy.com

They say LOCK YOUR DOMAINS, eveyone should have done this anyway.

dij · 11-11-2004, 04:51 AM

this will be very VERY interesting

mkx · 11-11-2004, 05:01 AM

I really would like to know if I can legally send transfer requests to any domains with bogus phone numbers thinking that their email address is bogus to and transfer the domain name.

I wonder if this can legally be done and won't cause a crapload of lawsuits

bigdog · 11-11-2004, 05:44 AM

this is some fucked up shit

Mr.Fiction · 11-11-2004, 05:51 AM

Quote:

Originally posted by raulph
I really would like to know if I can legally send transfer requests to any domains with bogus phone numbers thinking that their email address is bogus to and transfer the domain name.

I wonder if this can legally be done and won't cause a crapload of lawsuits

It would be just as legal as going into an unlocked house and stealing everything you want, assuming that because the door isn't locked they want you to have it. Tell that to the cops and see what they say.

DomBuyer · 11-11-2004, 05:55 AM

This is very real folks. Those of us in the domain world have known about it for a while, so are prepared.

Get some

from your register, or switch out asap.

11-11-2004, 01:53 AM	#1
p3rsian Confirmed User Join Date: Sep 2003 Posts: 1,050	ATTN: Lock Your Domains http://yro.slashdot.org/yro/04/11/1...l?tid=95&tid=17 http://news.netcraft.com/archives/2...ome_easier.html http://www.icann.org/transfers/policy-12jul04.htm Quote: Domain names could become easier to hijack as a change in domain transfer rules takes effect Friday. Under new rules set by the Internet Corporation for Assigned Names and Numbers (ICANN), domain transfer requests will be automatically approved in five days unless they are explicitly denied by the account owner. This is a change from current procedure, in which a domain's ownership and nameservers remain unchanged if there is no response to a transfer request. This could mean trouble for domain owners who don't closely manage their records. Domains with incorrect e-mail addresses and outdated administrative contact information are at particular risk, as the domain's WHOIS database information will be used to inform domain owners of transfer requests. A non-response becomes the equivalent of answering "yes" to a transfer request, according to the ICANN policy change. "Failure by the Registrar of Record to respond within five (5) calendar days to a notification from the Registry regarding a transfer request will result in a default 'approval' of the transfer," the new rules state. "In the event that a Transfer Contact listed in the Whois has not confirmed their request to transfer with the Registrar of Record and the Registrar of Record has not explicitly denied the transfer request, the default action will be that the Registrar of Record must allow the transfer to proceed." __________________ boro en harfa chei

11-11-2004, 02:06 AM	#2
p3rsian Confirmed User Join Date: Sep 2003 Posts: 1,050	is this real ? this was the 1st time i heard this so i posted it here __________________ boro en harfa chei

11-11-2004, 02:09 AM	#3
Dagwolf President of Canada Join Date: Sep 2003 Location: Leaving Hell, Entering Limbo Posts: 23,141	I heard about it yesterday... I'm locking my domains right now. Geez, as if we didn't have enough problems already... __________________ Sleep well, and dream of large women.

11-11-2004, 02:11 AM	#6
kmanrox aka K-Man Industry Role: Join Date: Oct 2001 Location: The Gutter Posts: 29,292	this is very real. __________________ Crypto HODLr Crypto mining Angel investor

11-11-2004, 02:12 AM	#7
beemk CLICK HERE Industry Role: Join Date: Jan 2002 Posts: 20,829	i dont see anywhere for locked domains on directnic, are they already locked? __________________ I host with Vacares

11-11-2004, 02:10 AM	#4
OWNED So Fucking Banned Join Date: Mar 2004 Posts: 852	No, it's just a big Internet Troll. Don't lock anything.

11-11-2004, 02:20 AM	#9
kmanrox aka K-Man Industry Role: Join Date: Oct 2001 Location: The Gutter Posts: 29,292	when does this come into effect? i need to start requesting transfer of a bunch of y'alls domain i want... __________________ Crypto HODLr Crypto mining Angel investor

11-11-2004, 02:43 AM	#11
Dagwolf President of Canada Join Date: Sep 2003 Location: Leaving Hell, Entering Limbo Posts: 23,141	I had all but 2 locked already so.. no biggie. :p __________________ Sleep well, and dream of large women.

11-11-2004, 02:43 AM	#12
Gynecologist Confirmed User Join Date: Sep 2004 Location: Los Angeles Posts: 2,184	People already trying to steal my doamins. Gottem all locked now.

11-11-2004, 03:19 AM	#13
Project-Shadow Confirmed User Industry Role: Join Date: Feb 2003 Posts: 7,340	Bump, dont wanna see people having their domains stolen..

11-11-2004, 03:28 AM	#15
erehwon Confirmed User Industry Role: Join Date: Nov 2003 Location: A secure undisclosed location... Posts: 3,759	What pisses me off is Register.com has no domain locking feature, and won't have one in place for months. I have a bunch of domains at GKG.net which is nearly five times cheaper than Register and they have domain locking and better spam protection. If I lose a domain over this shit, someone at ICANN is going to get a major beatdown over this, I can't understand if its not broken, why fix it? __________________ Money NEVER $leep$...

11-11-2004, 03:48 AM	#16
mkx Confirmed User Industry Role: Join Date: Nov 2003 Location: Toronto Posts: 4,001	Does this mean that I can go around browsing multi thousand dollar domains fowarding to search portals with invalid contact emails and request a transfer? I am going to lock all my directnic domains now. Good thing it's thursday and good think i found this post. I never got any email from Directnic about this though, are you sure it is not bogus? This could cause a lot of problems for many domain owners. I would concider this the same thing as being able to transfer the ownership of someones home or business by mailing them a letter and if they don't reply back within 5 days, you get it automatically. I don't think this is possible but I will read those 3 links for more info and lock all my domains.

11-11-2004, 03:52 AM	#17
mkx Confirmed User Industry Role: Join Date: Nov 2003 Location: Toronto Posts: 4,001	"A transfer must not be allowed to proceed if no confirmation is received by the Gaining Registrar. The presumption in all cases will be that the Gaining Registrar has received and authenticated the transfer request made by a Transfer Contact. " http://www.icann.org/transfers/policy-12jul04.htm

11-11-2004, 03:55 AM	#18
mkx Confirmed User Industry Role: Join Date: Nov 2003 Location: Toronto Posts: 4,001	Sorry for the triple post but I think your right This was on my directnic security settings page "Transfer Security Settings High Security - *** Recommended: This will place all domains on lock status. Lock status will prevent any transfers from occurring. You may still transfer your domains, but you will need to first unlock the domains individually using the Domain Registry Status Manager link below. Normal Security: This will automatically allow the transfer to select registrars, if neither of the notification emails is responded to within five days. " Does this become active tomorrow? What are some legal issues associated with sending transfers to unlocked domain names to take their domain if they don't reply?

11-11-2004, 04:00 AM	#19
V_RocKs Damn Right I Kiss Ass! Industry Role: Join Date: Dec 2003 Location: Cowtown, USA Posts: 32,409	Almost makes you wonder if Bush is just an idiot or just a fucking clown.

11-11-2004, 04:01 AM	#20
Kelvin Confirmed User Join Date: Oct 2003 Location: AZ Posts: 226	Yup, this is for real. It starts TOMORROW Check out the top of godaddy.com http://www.godaddy.com They say LOCK YOUR DOMAINS, eveyone should have done this anyway. __________________ www.adultencoders.com High quality DVD encoding, Fast turn around, Unbeatable prices. *Divx, Xvid, Windows Media, Flash, MPEG1/MPEG2, Quicktime, Real Media, Video for Ipod, Sony PSP Video* Kevin [email protected] ICQ# 83020928 AIM: AdultEncoders GapeThatAss.com

11-11-2004, 04:51 AM	#21
dij Confirmed User Join Date: May 2003 Posts: 2,163	this will be very VERY interesting

11-11-2004, 05:01 AM	#22
mkx Confirmed User Industry Role: Join Date: Nov 2003 Location: Toronto Posts: 4,001	I really would like to know if I can legally send transfer requests to any domains with bogus phone numbers thinking that their email address is bogus to and transfer the domain name. I wonder if this can legally be done and won't cause a crapload of lawsuits

11-11-2004, 05:44 AM	#23
bigdog Confirmed User Join Date: Jul 2001 Posts: 6,964	this is some fucked up shit

11-11-2004, 05:55 AM	#25
DomBuyer Confirmed User Join Date: Sep 2002 Location: Amalfi Coast Posts: 2,595	This is very real folks. Those of us in the domain world have known about it for a while, so are prepared. Get some from your register, or switch out asap.