NameDrive leaked- "Less than 1% of accounts affected"

rob · 05-02-2009, 12:51:21 PM

NameDrive Account Information leaked; Less than 1% of accounts affected | Domain Name News

It makes the password thread from yesterday make more sense - http://www.acorndomains.co.uk/namedr...ty-update.html

Likewise Sedo's post from earlier

rob · 05-02-2009, 12:52:59 PM

I cant edit the title, as would change it from 'hacked' to 'leaked' as there is a difference.

I hope the person leaking it will be suitably hung drawn and quartered!

SecNam · 05-02-2009, 01:38:58 PM

title changed

Jeewhizz · 05-02-2009, 01:40:33 PM

I assume there are safeguards in place, so should someone login, and change the email address and/or paypal/bank details, it sends an email?

NameDriver · 05-02-2009, 02:04:39 PM

Hi Jeewhiz,

We check bank details which have been recently changed every month before any payouts are sent.

Payout changes will also need to be confirmed by mail shortly.

Ed

rob · 05-02-2009, 03:15:10 PM

Hi Ed,

Whats the 'leak' element all about?

Cheers,
Rob.

NameDriver · 05-02-2009, 06:26:31 PM

Hi Rob,

Sorry I didn't post earlier. I don't want to go into too much detail on this as I feel the more you say about security protocols, the less secure they become.

We became aware of an issue regarding a very small number of accounts yesterday afternoon and immediately took action to inform those account owners and to change our system's password information for all accounts as a precaution. The leak has now been plugged and we have further enhanced our existing security structure.

All those who didn't receive an email previously will now have done so as we sent out a mail to all other accounts as well just to clarify the matter.

Ed

retired_member9 · 05-02-2009, 08:12:52 PM

Very bad that all passwords at Namedrive were (are?) stored in a clear text.

This practice isn't normally used for ages..! a secure password hash is stored instead.

With clear-text password anyone (incl. dishonest employees) could leak password and try to obtain access to other sites/services where same password is used (bad practice obviously)

Darren · 05-02-2009, 08:24:05 PM

Agreed Viz.

grandin · 06-02-2009, 06:56:12 AM

I am moving my domains to sedo.

1. Namedrive revenue is poor therefore which parking company has little relevance
2. Based on 1 above its about who sells more names....thats sedo
3. If you push the right button sedo deliver very good results

Lee

05-02-2009, 12:51:21 PM	#1 (permalink)
rob Founding Member Join Date: Jan 2005 Posts: 5,978 No Classified Ratings Domain Trader Rating: (100% / 37)	NameDrive leaked- "Less than 1% of accounts affected" NameDrive Account Information leaked; Less than 1% of accounts affected \| Domain Name News It makes the password thread from yesterday make more sense - http://www.acorndomains.co.uk/namedr...ty-update.html Likewise Sedo's post from earlier __________________ Eat more chips! Dont let salad win! hey. how to sell a website \| sell your website to me whats the number for milk tokens? TDA Blue Badge Wrexham News Wrexham Weather Owain Glyndwr

05-02-2009, 01:40:33 PM	#4 (permalink)
Jeewhizz Join Date: May 2006 Posts: 1,188 No Classified Ratings Domain Trader Rating: (100% / 17)	I assume there are safeguards in place, so should someone login, and change the email address and/or paypal/bank details, it sends an email? __________________ UK Web Design & Development Airport Car Parking \| Business Help & Advice \| Critical Illness Insurance \| Smoothie Recipes \| Baby Name Books

05-02-2009, 02:04:39 PM	#5 (permalink)
NameDriver NameDrive Staff Join Date: Aug 2005 Posts: 729 No Classified Ratings Domain Trader Rating: (0% / 0)	Hi Jeewhiz, We check bank details which have been recently changed every month before any payouts are sent. Payout changes will also need to be confirmed by mail shortly. Ed __________________ Email: Craig@namedrive.com

05-02-2009, 06:26:31 PM	#7 (permalink)
NameDriver NameDrive Staff Join Date: Aug 2005 Posts: 729 No Classified Ratings Domain Trader Rating: (0% / 0)	Hi Rob, Sorry I didn't post earlier. I don't want to go into too much detail on this as I feel the more you say about security protocols, the less secure they become. We became aware of an issue regarding a very small number of accounts yesterday afternoon and immediately took action to inform those account owners and to change our system's password information for all accounts as a precaution. The leak has now been plugged and we have further enhanced our existing security structure. All those who didn't receive an email previously will now have done so as we sent out a mail to all other accounts as well just to clarify the matter. Ed __________________ Email: Craig@namedrive.com

05-02-2009, 08:24:05 PM	#9 (permalink)
Darren Join Date: Feb 2008 Location: Kent Posts: 1,829 No Classified Ratings Domain Trader Rating: (100% / 77)	Agreed Viz. Last edited by Darren; 06-02-2009 at 08:45:07 AM. Reason: ND edit.

05-02-2009, 12:52:59 PM	#2 (permalink)
rob Founding Member Join Date: Jan 2005 Posts: 5,978 No Classified Ratings Domain Trader Rating: (100% / 37)	I cant edit the title, as would change it from 'hacked' to 'leaked' as there is a difference. I hope the person leaking it will be suitably hung drawn and quartered!

05-02-2009, 01:38:58 PM	#3 (permalink)
SecNam Join Date: Jul 2004 Posts: 4,206 Classified Rating: 100% (1) Domain Trader Rating: (100% / 44)	title changed

05-02-2009, 03:15:10 PM	#6 (permalink)
rob Founding Member Join Date: Jan 2005 Posts: 5,978 No Classified Ratings Domain Trader Rating: (100% / 37)	Hi Ed, Whats the 'leak' element all about? Cheers, Rob.

05-02-2009, 08:12:52 PM	#8 (permalink)
retired_member9 Join Date: Aug 2005 Posts: 522 No Classified Ratings Domain Trader Rating: (80% / 3)	Very bad that all passwords at Namedrive were (are?) stored in a clear text. This practice isn't normally used for ages..! a secure password hash is stored instead. With clear-text password anyone (incl. dishonest employees) could leak password and try to obtain access to other sites/services where same password is used (bad practice obviously)

06-02-2009, 06:56:12 AM	#10 (permalink)
grandin Join Date: May 2006 Posts: 1,273 No Classified Ratings Domain Trader Rating: (100% / 26)	move to sedo I am moving my domains to sedo. 1. Namedrive revenue is poor therefore which parking company has little relevance 2. Based on 1 above its about who sells more names....thats sedo 3. If you push the right button sedo deliver very good results Lee __________________ Buy To Let Mortgages Buy To Let mortgages Discount Mortgages landlord insurance student loan Commercial Mortgages Fixed Mortgages UK Hotels UK Holidays

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Domain Name Community	Replies	Last Post
Barclays online accounts - branch address for Namedrive?	devolution	NameDrive	4	08-12-2008 08:40:28 AM