News for hackers. Stuff that matters.
Re:Taking Over DigitalOcean Domains via a Lax Domain Import ... by ZoF on Friday August 26, 2016 @04:58AM (#12365054)
I do think it's reasonable.

If the domain is added to the account there is no PoC, it's only for domains that have been removed from accounts but still have the nameserver values(meaning the domain is not being used at this point, there's no zone file if it isn't added to an account).

So this is mostly only going to affect currently derelict domains. I'm not saying it isn't something to worry about, but I do think it's a reasonable solution.

Re:Taking Over DigitalOcean Domains via a Lax Domain Import ... by Dylan16807 on Friday August 26, 2016 @05:05AM (#12365081)
What you just described as reasonable is not the scenario I asked about, which is just "pointing to someone else's nameservers".