News for hackers. Stuff that matters.
Re:DDOS on Namecheap Free DNS and Default DNS V2 by jik on Thursday February 20, 2014 @12:02PM (#7271930)
Just for future reference, it's usually considered a good idea to put your status page on completely independent infrastructure so that it stays up even when the rest of your stuff goes down. A status page that doesn't work during an outage isn't particularly useful.
Re:DDOS on Namecheap Free DNS and Default DNS V2 by ted0 on Thursday February 20, 2014 @12:24PM (#7272123)
Good point. The status page is on another cloud but since this is a DNS issue, the subdomain is down. In the future, we'll investigate running this page on a secondary DNS.
Re:DDOS on Namecheap Free DNS and Default DNS V2 by jik on Thursday February 20, 2014 @12:30PM (#7272179)
According to whois for namecheap.com, the DNS for that domain is hosted on dynect.net, and "host status.namecheap.com" resolves just fine (to 204.232.212.56), so it does not appear to be a DNS issue that is preventing your status page from working.
Re:DDOS on Namecheap Free DNS and Default DNS V2 by ted0 on Thursday February 20, 2014 @12:40PM (#7272262)
I stand corrected. It's on Rackspace, which apparently is also experiencing issues.
Re:DDOS on Namecheap Free DNS and Default DNS V2 by ted0 on Thursday February 20, 2014 @01:46PM (#7272730)
Rackspace helped us get our status page back online: http://status.namecheap.com/
Re:DDOS on Namecheap Free DNS and Default DNS V2 by duhorg on Thursday February 20, 2014 @11:53PM (#7275515)
Perhaps also investigate allowing customers to slave their own secondary DNS, too? (That is, allow AXFRs.)

This has been a feature requested for, as far as I can tell from the support forums, four years now. It should be possible to make this allowed/disallowed per-zone, and as far as I'm concerned, I don't care who is able to download my tiny zone file. It would allow me to add more diversified DNS servers in the face of things like a DoS against Namecheap.

Re:DDOS on Namecheap Free DNS and Default DNS V2 by irontoby on Thursday February 20, 2014 @12:54PM (#7272370)
Posting up-to-the-minute updates on Twitter is also a good idea. Lots of tweets come back from a search for "Namecheap" & you want to be sure you're a part of that conversation!
Re:DDOS on Namecheap Free DNS and Default DNS V2 by Jailout2000 on Thursday February 20, 2014 @01:23PM (#7272589)
They've been posting updates 30 minutes before your post buddy, and still are now. https://twitter.com/Namecheap
Re:DDOS on Namecheap Free DNS and Default DNS V2 by ted0 on Thursday February 20, 2014 @01:25PM (#7272606)
Yes, we are actively posting updates on Twitter.
Re:DDOS on Namecheap Free DNS and Default DNS V2 by ilikesnowflakes on Thursday February 20, 2014 @12:13PM (#7272027)
If the hackers really want to take you down, adding another server in isn't very hard...
Re:DDOS on Namecheap Free DNS and Default DNS V2 by jik on Thursday February 20, 2014 @12:16PM (#7272053)
If you're as big as NameCheap, you can afford to pay CloudFlare or somebody like it to protect your status page.
Re:DDOS on Namecheap Free DNS and Default DNS V2 by jkirker on Thursday February 20, 2014 @01:03PM (#7272431)
Cloudflare has also been nailed the last 3 weeks in a row causing outages. Just search Twitter for cloudflare DDOS or NTP or etc. etc. etc. At the end of the day there are currently so many slave machines out there we are all vulnerable. It's just the nature of things. At least outages are only temporary. It's much better than the early days were we'd be down for 12 hours at a time. https://twitter.com/search?q=cloudflare%20attack&src=typd
Re:DDOS on Namecheap Free DNS and Default DNS V2 by nc-customer on Thursday February 20, 2014 @01:07PM (#7272476)
I suspect the hackers are targeting one of namecheap's customers, not namecheap directly. Because that's usually the case, a good approach is to not give all customers the exact same nameservers.
Re:DDOS on Namecheap Free DNS and Default DNS V2 by sparagi on Friday February 21, 2014 @05:56PM (#7280016)
I agree. We left Network Solutions b/c they were hit 3 times in less than a year. Maybe the website targets moved to Namecheap, so they were targeted also?
Re:DDOS on Namecheap Free DNS and Default DNS V2 by kennhardy on Thursday February 20, 2014 @12:05PM (#7271952)
Like!
Re:DDOS on Namecheap Free DNS and Default DNS V2 by backspaces on Thursday February 20, 2014 @12:45PM (#7272312)
Not having separate status hosting is liken not salting passwords. As a NC user, I may leave just for this reason