News for hackers. Stuff that matters.
Re:We got hacked by MichaelApproved on Friday May 10, 2013 @05:01PM (#5688664)
“give a shit”

This language is such a turn-off. Very few organizations can use that type of flippant language successfully, especially in a serious email like this. Now's not the time to try to be hip or cool. This is a serious issue and the writer should be just as serious.

Edit: Their site is down now so here's a copy of their post

Many of you received our email or saw online that name.com was hacked. The truth is that it's one of the more painful admissions that can be made on the Internet. We want you to know that when we say that we “give a shit” we truly mean it. In an effort to maintain the open, honest, and transparent reputation we’ve built for ourselves, we’re going to give you the lowdown on what happened and what we did in response.

Our security team alerted us that unauthorized individuals had accessed our database. After doing some digging we found that the attack seemed to be geared toward a few specific accounts. The hackers had a target and name.com was a means to that end.

The information that was accessed includes usernames, passwords, physical addresses, email, hashed passwords and encrypted credit card data. EPP codes (required for domain name transfers) are not stored in the same place so those were not compromised. For the techies who are wondering, the encryption on the credit card information is 4096 bit RSA. Since the password hashes were compromised we took proactive steps and initiated a site-wide password reset (hence the email, apologies for the inconvenience).

We are genuinely sorry for the annoyance and the scare. We’re taking this incredibly seriously and are doing everything possible to continue to improve the security of our systems. We greatly appreciate the support across the web and over the phones.

Re:We got hacked by X-Istence on Saturday May 11, 2013 @12:18AM (#5689698)
It's their tagline:

"Name.com is a fully accredited ICANN domain name registrar. In addition to great pricing and service, we offer SSL certificates, web hosting, premium and expired domains. Most importantly, we've been giving a $#*! since 2003!"

Re:We got hacked by MichaelApproved on Saturday May 11, 2013 @06:51AM (#5690280)
Holy shit, you're right! I thought this was a joke at first. Even after jonmrodriguez confirmed it, I thought he was continuing the joke but it's true. They actually say:

"Name.com is a fully accredited ICANN domain name registrar. In addition to great pricing and service, we offer SSL certificates, web hosting, premium and expired domains. Most importantly, we've been giving a $#*! since 2003!"

I still don't think it comes off well but, in that context, I guess it's not as bad as I originally thought. And that's probably why they put it in quotes in the message. It makes more sense now.

Thank you!

Re:We got hacked by jonmrodriguez on Saturday May 11, 2013 @02:57AM (#5689955)
Good find, it looks like most people on this thread missed this.
Re:We got hacked by kintamanimatt on Friday May 10, 2013 @06:28PM (#5689006)
To me it's really not a turn off at all. I'd rather they swear away and have a personality than be a starchy, try-not-to-offend-anyone bland corporate drone.
Re:We got hacked by MichaelApproved on Friday May 10, 2013 @08:06PM (#5689246)
Swearing is not the only way to show personality. In fact, it's one of the cheapest ways to do so. It's easy to say "fuck" and "shit" to break free form the usual generic writing but you can actually write a personal and honest message without cursing.

Edit: here's a great way to show personality without being crude http://www.name.com/aboutus#/ourTeam

Re:We got hacked by kintamanimatt on Friday May 10, 2013 @08:18PM (#5689278)
Is the word "shit" really that big of a deal? "Give a shit" is a colloquial way of saying they care without sounding like they're regurgitating some polished corporate-speak. It's not like they called the hackers cock-juggling thundercunt scriptkiddies while telling them to "bring it" now that they've fixed the problem. There's no element of juvenility in how they said what they said, and they're not using grown-up words to call people names for the sake of it. I sense no element of posturing.

In all cases I'd rather deal with real people than whitewashed "employees". In many ways I'm glad they offended someone over the word "shit" because it means they're being at least a little true to themselves.

Re:We got hacked by MichaelApproved on Friday May 10, 2013 @09:34PM (#5689418)
I agree that sterile generic corporate speak is not good but it sounds like you're saying that the only way they could be true to themselves or to appear as real people is to use shit.

I disagree.

Re:We got hacked by nostromo on Friday May 10, 2013 @06:57PM (#5689077)
I actually liked the blunt honesty. It's so much better than the usual "Your call is very important to us" corporate double speak.
Re:We got hacked by MichaelApproved on Friday May 10, 2013 @08:03PM (#5689236)
Blunt honesty does not have to be crude. Also being crude is not the only way to avoid being generic.

Blunt honesty without being crude: We screwed up, we're sorry.

Avoiding being generic without being crude: We want you to know that when we say that this matters to everyone in the company, we truly mean it.

Re:We got hacked by kintamanimatt on Friday May 10, 2013 @08:22PM (#5689283)
> Avoiding being generic without being crude: We want you to know that when we say that this matters to everyone in the company, we truly mean it.

If that doesn't sound like whitewashed corporate-speak, I don't know what does. It sounds like an empty platitude and I wouldn't even believe it if someone said that to me.

Re:We got hacked by MichaelApproved on Friday May 10, 2013 @08:53PM (#5689342)
Sure. I spent 30 seconds on it but are you saying the only way to show you care and not sound generic is to curse?
Re:We got hacked by kintamanimatt on Friday May 10, 2013 @08:56PM (#5689347)
It's not the only way, it's just a damn good way!
Re:We got hacked by PakG1 on Friday May 10, 2013 @11:29PM (#5689617)
Nah, I've experienced plenty of situations where cursing just makes me lose respect for someone/thing. I'm not saying I'm against cursing (though I don't really curse much myself). I'm saying that cursing shouldn't be used flippantly. It loses its power if it is. This sounds flippant to me, especially when they put it in quotes.
Re:We got hacked by adamneilson on Saturday May 11, 2013 @04:56AM (#5690144)
They put it in quotes because its their company strap line. It's at the footer of every one of their pages: "giving a @&$#!! since 19xx (some year I don't recall)
Re:We got hacked by MichaelApproved on Saturday May 11, 2013 @06:52AM (#5690282)
You're right! I didn't notice this and it puts it all in context now. I thought you and others were joking but I saw it a few times so I finally checked.

I wish I could still edit my original post to put this in.

Re:We got hacked by PakG1 on Saturday May 11, 2013 @10:55AM (#5690752)
Thank you for shedding light.
Re:We got hacked by moe on Friday May 10, 2013 @08:55PM (#5689345)
But we sincerely mean it!

We value you as a customer and appreciate your business. Thank you for your consideration, and don't forget to sign up for our newsletter.

Re:We got hacked by ErrantX on Friday May 10, 2013 @07:07PM (#5689106)
Nah, it's just hipster double speak :)
Re:We got hacked by rammark on Friday May 10, 2013 @06:02PM (#5688919)
I don't think I'd want to use a domain registrar run by people who think that using the mustache meme on their "About Us" page [1] is professional. I'm not usually prudish about language or jokes, but hosting and domains are serious business.

[1]: http://www.name.com/aboutus#/ourTeam

Re:We got hacked by MichaelApproved on Friday May 10, 2013 @08:11PM (#5689264)
I can understand why you'd be turned off by that but at least it's on a page that doesn't necessarily have to be serious. You're learning about the company and this is part of their culture. In fact, that's a great example of a company showing personality without resorting to crude language.
Re:We got hacked by austengary on Saturday May 11, 2013 @03:43AM (#5690030)
Honestly, I don't like the use either. It is a serious issue. They know that. The writer knows that. Nevertheless the writer, while perhaps in poor judgment, assessed the situation in need of a slight touch of relief. They're trying to calm their customers. It looks like this is where they shall begin.

This commentary though, it is unnecessary. They are making an attempt of remain open and communicate with their customers. Responses like these aren't going to aid further such attempts of similar observers. Others are going continue as many still do: skating by with such breaches unreported. Your data will be out there and you won't have a clue. Would that be better?

This very view has been much of what is wrong with HN these days. Comments with this air of pseudo-intellectual, overly-critical analysis over the inherent nature of intentions (and word use).

Re:We got hacked by cjh_ on Friday May 10, 2013 @07:15PM (#5689134)
I read this as 'give a shirt' so I was reading the article the whole time wondering 'who gets the shirt?'.
Re:We got hacked by MichaelApproved on Friday May 10, 2013 @10:26PM (#5689502)
Probably because you'd sooner expect the word "shirt" in a message like this than the word "shit".
Re:We got hacked by larrys on Friday May 10, 2013 @05:13PM (#5688713)
Meanwhile in looking to re-read that language I get this error:

"You don't have permission to access /blog/general/2013/05/we-got-hacked/ on this server.

Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request."

Re:We got hacked by rallison on Friday May 10, 2013 @05:20PM (#5688748)
Same here. Given that they got hacked, given some of the other comments about the content of the post, and given that they apparently can't build a site that can handle a hackernews frontpage, I think I will continue to avoid them as a registrar.

Edit: And, their bulk domain search still appears to be broken for entering more than five domain names: http://www.name.com/names

Edit2: The new error with their blog post:

The webpage at http://www.name.com/blog/general/2013/05/we-got-hacked/ has resulted in too many redirects.

Re:We got hacked by SkyMarshal on Friday May 10, 2013 @05:36PM (#5688825)
That plus their DNS hijacking [1]. I really loved their UI, but have been moving my domains off Name.com as they come up for renewal.

[1]: https://duckduckgo.com/?q=name.com+dns+hijack

Re:We got hacked by Timothee on Friday May 10, 2013 @06:44PM (#5689042)
I believe that you can transfer them right away without losing any time on your lease. Meaning if you have 6 months before a domain expires and transfer it to a new registrar and pay for a year, you'll have a year and a half before it expires.

I've never done it myself but I've read it in multiple occasions so it might be worth checking if you're really looking at moving away.

Re:We got hacked by rallison on Friday May 10, 2013 @07:34PM (#5689174)
Correct. And some domains can be tough to transfer once you get too close to renewal time, so I'd recommend transferring sooner rather than waiting for the renewal date to come up.
Re:We got hacked by larrys on Friday May 10, 2013 @07:23PM (#5689144)
Yes this is correct. You don't lose any time when switching. And actually any time a domain is switched 1 year is automatically added to the expiration date (.com/net/org/info).
Re:We got hacked by jervisfm on Friday May 10, 2013 @06:34PM (#5689020)
Curious, where have you been moving your domains to ?
Re:We got hacked by SkyMarshal on Friday May 10, 2013 @06:40PM (#5689031)
Namecheap. Seems to be the favorite among the HN crowd. Also, they donate to EFF.

Oh, and gandi.net for TLDs I can't get from namecheap, like .io, .cx.

http://community.namecheap.com/blog/2011/12/29/25000-eff-don...

Re:We got hacked by rallison on Friday May 10, 2013 @07:32PM (#5689166)
Same here. Namecheap for the common domains, Gandi for the slightly more exotic ones. I've been happy with both.

I also have one domain at networksolutions (it was worth a $100 difference over five years vs gandi), but I definitely would avoid them in the future. As soon as I ordered, they started calling once per day attempting to sell further services. They are on my avoid list now.

Re:We got hacked by brewdad on Saturday May 11, 2013 @12:59AM (#5689746)
I started the transfer process for a .im to Gandi last night. I just wish Namecheap handled that TLD so I could manage everything in one place.
Re:We got hacked by SkyMarshal on Friday May 10, 2013 @05:22PM (#5688757)
Looks like all of http://www.name.com/blog is down.
Re:We got hacked by mike-cardwell on Friday May 10, 2013 @05:47PM (#5688863)
Re:We got hacked by Mz on Friday May 10, 2013 @05:11PM (#5688705)
I agree. I am prone to "swearing like a sailor" but in public (including the internet), I try to keep it pg-13-ish most of the time. Even on my personal blog, where some folks think I say waaay too much about my (lack of a) sex life, I try to limit the swearing. If I can figure out that this does not make a good impression, one would hope that "business people" could too (though perhaps not).

(Also, fwiw, I am grossed out by casual references to poop, no matter how nicely they say it, but especially when using the S word. I am very prone to F bombs, but, then, I actually like sex. But references to poop have me envisioning it. No thanks. Ick. Y'all are disgusting. And, though perhaps not the norm, I am probably not the only person who dislikes having images of poop forced upon them, even if others don't necessarily have the quirk of finding it more offensive than the F word.)

Re:We got hacked by prawn on Friday May 10, 2013 @10:20PM (#5689492)
For someone who dislikes references to "poop", you certainly mention it a lot.
Re:We got hacked by escaped_hn on Friday May 10, 2013 @06:57PM (#5689080)
Dammed if you do, dammed if you don't.
Re:We got hacked by MichaelApproved on Friday May 10, 2013 @08:09PM (#5689254)
What do you mean? Who damns a company that doesn't curse in their press releases?