News for hackers. Stuff that matters.

A comment on Namecheap live chat social engineering leads to loss of 2 VPS.

Re:Namecheap live chat social engineering leads to loss of 2... by willyyr on Tuesday April 12, 2016 @10:52AM (#11480051)
So he is using 2FA for all the important accounts but for the most important one (the email which he used to register an account at all these services) he's using a weak pw and no 2FA? Am i missing something here? Yes they did not follow protocol but why would one not use 2FA for such an important email addy?
[ Parent | on HN ]
Re:Namecheap live chat social engineering leads to loss of 2... by arturhoo on Tuesday April 12, 2016 @11:01AM (#11480129)
I thought the same thing! Although he is definitely right to complain about Namecheap, the biggest takeaway is, your email is the most important service you have on the internet:

> I’m pretty careful to use 2FA for any service that I consider important

[ Parent | on HN ]
Re:Namecheap live chat social engineering leads to loss of 2... by matthewdrussell on Tuesday April 12, 2016 @11:11AM (#11480214)
Correct.

I'm surprised no one else has mentioned no 2FA for the email. The email being compromised opened the door to this happening.

[ Parent | on HN ]
Re:Namecheap live chat social engineering leads to loss of 2... by mbrameld on Tuesday April 12, 2016 @02:56PM (#11482463)
The email being compromised opened the door to his email being compromised. The door to his Namecheap account being compromised was apparently already wide open.
[ Parent | on HN ]
Re:Namecheap live chat social engineering leads to loss of 2... by levemi on Tuesday April 12, 2016 @03:04PM (#11482533)
No, OP didn't have 2FA enabled on their namecheap account. It was namecheap's fault for improper handling of the social engineering attack but OP could have protected themselves by having 2FA
[ Parent | on HN ]
Re:Namecheap live chat social engineering leads to loss of 2... by cname on Tuesday April 12, 2016 @05:43PM (#11483838)
The article pretty clearly states 2FA was enabled for the Namecheap account in question. In fact, that is sort of the whole point of the article.
[ Parent | on HN ]
Re:Namecheap live chat social engineering leads to loss of 2... by levemi on Tuesday April 12, 2016 @08:14PM (#11484706)
Oh this comment by CIO led me to think 2FA wasn't...

https://news.ycombinator.com/item?id=11480221

You should not be able to overcome 2FA with social engineering wtf!

[ Parent | on HN ]