**Lensman** -- Lock Your Domains - GoFuckYourself.com

GeorgeK · 01-16-2005, 02:49 AM

If you check the WHOIS of adult.com, gfy.com, and gofuckyourself.com (and presumably your other domains too), they're ALL unlocked. Thus, they could be hijacked the exact same way Sleazydream experienced:

http://www.whois.sc/adult.com
http://www.whois.sc/gofuckyourself.com
http://www.whois.sc/gfy.com

The status of "ACTIVE" in the WHOIS means that the domain is unlocked. You'd want it to show a status of "Registrar-Lock", e.g. the WHOIS of sex.com

http://www.whois.sc/sex.com

Keeping your domain names unlocked means that you're hoping there aren't any rogue registrars or individuals that won't properly authenticate transfers. Those hopes would be shattered, in time....

At most registrars, locking the names is FREE.

I pointed this out a few months ago I think, but Sleazydream's experience might highlight that more folks should be taking better precautions on their own.

All my top domains are 1) locked, 2) renewed until past 2010 (no expiry risk), 3) kept at a trustworthy registrar (OpenSRS, but others are good too -- avoid NSI), 4) have up-to-date WHOIS, with full contact info, 5) cached WHOIS histories at www.whois.sc to demonstrate provenance to others, 6) strong passwords to the admin control panels that manage the domain names, and 7) multiple INDEPENDENT email addresses to prevent domain theft (i.e. it would not be enough to hack any single email address to hijack a domain -- there are multiple layers of protection; e.g. different email address to access password for unlocking domain, vs. authenticating an outgoing transfer).

8 Characters · 01-16-2005, 02:54 AM

Why didn't you just try to hijack them, what the fuck is wrong with you???????

mailman · 01-16-2005, 02:55 AM

hes looking for a COOKIE!

GeorgeK · 01-16-2005, 02:56 AM

If it's a crime to covet honour, that's what's wrong with me.

BRISK · 01-16-2005, 02:56 AM

Too late, GFY has already been hijacked by sigwhores

Pornwolf · 01-16-2005, 02:57 AM

That was very nice of you. I hope he's reading this now because, now that you mentioned it on a public board, there are some dirty bastards trying to get it.

kmanrox · 01-16-2005, 02:57 AM

if this is true, no doubt heads will roll in Lensman's office

AlienQ - BANNED FOR LIFE · 01-16-2005, 02:57 AM

cherrylula · 01-16-2005, 02:59 AM

great idea, let everyone on gfy know instead of emailing him... genius.

GeorgeK · 01-16-2005, 03:04 AM

I've emailed in the past -- goes into the junk folder, unfortunately.

Posting it is the equivalent of flashing the bat signal.

It takes 5 or 6 days for a domain to get hijacked (i.e. for a transfer attempt that is not rejected to automatically go through), so there's no risk in publishing it on the board. If someone did attempt a transfer today, it would NOT go through immediately.

Better that he know this way, rather than having an email from me sit in the junk folder for a week, while the domain gets stolen by others with the same knowledge.

GeorgeK · 01-16-2005, 03:05 AM

By the way, that means the thief for Sleazydream's domains had likely initiated the transfer last week (for it to automatically go through yesterday, after the 5/6 day waiting period).

BRISK · 01-16-2005, 03:14 AM

Quote:

Originally Posted by GeorgeK

I've emailed in the past -- goes into the junk folder, unfortunately.

How do you know?

Hey You . . . I Know You! · 01-16-2005, 03:18 AM

What? What is this? Lock? Domain? Oh, what is this craziness all about??? I've never heard of such nonsense.

Loryn · 01-16-2005, 03:18 AM

Quote:

Originally Posted by mailman

hes looking for a COOKIE!

Love your sig!!!

01-16-2005, 02:49 AM	#1
GeorgeK Confirmed User Join Date: Dec 2003 Location: Toronto, Canada Posts: 423	Lensman -- Lock Your Domains If you check the WHOIS of adult.com, gfy.com, and gofuckyourself.com (and presumably your other domains too), they're ALL unlocked. Thus, they could be hijacked the exact same way Sleazydream experienced: http://www.whois.sc/adult.com http://www.whois.sc/gofuckyourself.com http://www.whois.sc/gfy.com The status of "ACTIVE" in the WHOIS means that the domain is unlocked. You'd want it to show a status of "Registrar-Lock", e.g. the WHOIS of sex.com http://www.whois.sc/sex.com Keeping your domain names unlocked means that you're hoping there aren't any rogue registrars or individuals that won't properly authenticate transfers. Those hopes would be shattered, in time.... At most registrars, locking the names is FREE. I pointed this out a few months ago I think, but Sleazydream's experience might highlight that more folks should be taking better precautions on their own. All my top domains are 1) locked, 2) renewed until past 2010 (no expiry risk), 3) kept at a trustworthy registrar (OpenSRS, but others are good too -- avoid NSI), 4) have up-to-date WHOIS, with full contact info, 5) cached WHOIS histories at www.whois.sc to demonstrate provenance to others, 6) strong passwords to the admin control panels that manage the domain names, and 7) multiple INDEPENDENT email addresses to prevent domain theft (i.e. it would not be enough to hack any single email address to hijack a domain -- there are multiple layers of protection; e.g. different email address to access password for unlocking domain, vs. authenticating an outgoing transfer). __________________ I buy good domain names. Send lists to George (at) LOFFS.com

01-16-2005, 02:56 AM	#4
GeorgeK Confirmed User Join Date: Dec 2003 Location: Toronto, Canada Posts: 423	If it's a crime to covet honour, that's what's wrong with me. __________________ I buy good domain names. Send lists to George (at) LOFFS.com

01-16-2005, 02:56 AM	#5
BRISK Too lazy to set a custom title Join Date: Feb 2003 Posts: 12,240	Too late, GFY has already been hijacked by sigwhores __________________ I post on GFY so that when people ask me what I do, I can tell them that I work with the mentally retarded.

01-16-2005, 02:57 AM	#6
Pornwolf Drunk and Unruly Join Date: Jan 2002 Location: Hollywood Posts: 22,712	That was very nice of you. I hope he's reading this now because, now that you mentioned it on a public board, there are some dirty bastards trying to get it. __________________ I've trusted my sites to them for over a decade... Webair, bitches.

01-16-2005, 02:57 AM	#7
kmanrox aka K-Man Industry Role: Join Date: Oct 2001 Location: The Gutter Posts: 29,292	if this is true, no doubt heads will roll in Lensman's office __________________ Crypto HODLr Crypto mining Angel investor

01-16-2005, 02:54 AM	#2
8 Characters So Fucking Banned Join Date: Jan 2005 Location: This month's character: Dirty Franck Posts: 2,336	Why didn't you just try to hijack them, what the fuck is wrong with you???????

01-16-2005, 02:55 AM	#3
mailman Confirmed User Industry Role: Join Date: Mar 2001 Location: Ontario, Canada Posts: 6,311	hes looking for a COOKIE!

01-16-2005, 02:57 AM	#8
AlienQ - BANNED FOR LIFE best designer on GFY Join Date: Mar 2003 Location: IALIEN.COM - High Definition Video and Photographic Productions -ICQ 78943384 Posts: 30,307	__________________ NAKED HOSTING FTW!11 I'm On The INSANE PLAN $9.95/mo! \| The Alien Blog Adult News Worth Reading Updated Daily \| Content For Sale! 641 PICS 216 MINUTES OF VIDEO $350.00 \|ICQ: 78943384 \|

01-16-2005, 02:59 AM	#9
cherrylula lol Industry Role: Join Date: Jan 2002 Posts: 15,969	great idea, let everyone on gfy know instead of emailing him... genius.

01-16-2005, 03:04 AM	#10
GeorgeK Confirmed User Join Date: Dec 2003 Location: Toronto, Canada Posts: 423	I've emailed in the past -- goes into the junk folder, unfortunately. Posting it is the equivalent of flashing the bat signal. It takes 5 or 6 days for a domain to get hijacked (i.e. for a transfer attempt that is not rejected to automatically go through), so there's no risk in publishing it on the board. If someone did attempt a transfer today, it would NOT go through immediately. Better that he know this way, rather than having an email from me sit in the junk folder for a week, while the domain gets stolen by others with the same knowledge. __________________ I buy good domain names. Send lists to George (at) LOFFS.com

01-16-2005, 03:05 AM	#11
GeorgeK Confirmed User Join Date: Dec 2003 Location: Toronto, Canada Posts: 423	By the way, that means the thief for Sleazydream's domains had likely initiated the transfer last week (for it to automatically go through yesterday, after the 5/6 day waiting period). __________________ I buy good domain names. Send lists to George (at) LOFFS.com

01-16-2005, 03:18 AM	#13
Hey You . . . I Know You! Too lazy to set a custom title Join Date: Aug 2004 Posts: 1,908	What? What is this? Lock? Domain? Oh, what is this craziness all about??? I've never heard of such nonsense.