Tell HN: Namecheap gave my account to an unverified third party — editorial image
Signal Ledger illustration · Generated
Technology

Tell HN: Namecheap gave my account to an unverified third party

The update

I’ve been a NameCheap customer for 13 years. I’ve also helped out an old college club paying for a.

Why it matters

com they use (that is registered to me under my name, address, and phone number). During a recent leadership transition, the incoming club lead wanted to make changes to the DNS and didn’t know to contact me.

What sits behind it

They figured out the domain name was parked at NameCheap, so they initiated a password reset using the domain name

Where this fits in Signal Ledger

Related coverage from the Technology desk.

Our take

They figured out the domain name was parked at NameCheap, so they initiated a password reset using the domain name. He convinced them the domain registered in my name and address really belonged to his club, and with no verification or validation whatsoever.

Source note

Hacker News reporting: https://news.ycombinator.com/item?id=49028037

Read the original reporting