ID: Pass:  
 

Posts Tagged ‘hijack’

eNom Loses Domain - Uses Schultz Defense

Saturday, October 25th, 2008

i know nothingI am often astounded at the incompetence of others. One of the major problems with these “virtual assets” is that we rely on other companies to hold them for us. Its not like money, where you can take it out of the bank and put it under your mattress.

Here is a classic example of a story that is unfolding right now about one of my domain names.

The registrar in question, eNom is using the Sgt Schultz defense of “I know nothing” and its driving me crazy. Has this ever happened to you?

Timeline

1. Win NameJet auction on December 4, 2007 and the domain goes into my eNom account.

2. Receive renewal notice on October 20, 2008 from eNom saying that my domain name will expire on 11-30-2008.

3. Try to transfer the domain name out to another registrar. When I try to release the lock at eNom I get “Failed to get Registrar Lock Status“. When I click on “Email Auth Code to Registrant” it says “Domain does not have an AuthInfo key“. Very strange - so I contact eNom support.

4. eNom support say “This domain is not registered with eNom at this time” and that its with “Registrar: DOMAIN JINGLES, INC.”. This is interesting, because I can SEE THE DOMAIN IN MY ACCOUNT !!! I also don’t have an account with Domain Jingles.

5. I check the Domain Jingles whois and it says my domain is “Registration Service Provided By: eNom, Inc.” Hmmm….

6. I update the support ticket with these new facts and receive this response from eNom: “We have forwarded this ticket to our senior technical support staff to research further. Depending on what we find it might be a few days before we have a solution or additional questions for you. I have requested a resolution as quickly as possible to minimize your wait time.

7. Today I login to my eNom account and the domain name is no longer there. It’s just disappeared! I have received no notices to transfer it out. The whois data is registered under my name and my contact email address. Nothing has changed except that its no longer in my account.

8. I called eNom phone support in the USA. They tell me that the domain is with DomainJingles (who is  an eNom reseller) and that I should call them. The support staff also tell me that they will flag this ticket and ask their techo’s to investigate. I explain the obvious concerns I have about:

  • Having a domain in my account that suddenly disappeared.
  • The fact that the domain name expires in a months time and nobody can tell me where it went!
  • The registrar asks me (their customer) to contact THEIR reseller, who I don’t know.

I’ve tried to make contact with Domain Jingles, and will keep you all posted on further developments. In the meantime, if you can think of anything feel free to post a comment.


Chrome Hijacks 404’s & Discloses Info To Google

Sunday, September 14th, 2008

A picture tells a thousand words. Lets look at what happens when Google Chrome visits a web page that does not exist:

google chrome redirects 404s

What Are The Issues?

1. Revenue from 404 pages down. Although that depends on if you park or develop yourself.

2. Look what happens when its http://www.secure-domain-blah.com/user.php?user=john&session=12345678. Google is now in possession of my User ID and session details.

I tried it out on a non existent test script on Domainer Income. For those technical people, this is what it looked like when I ran a packet sniffer over it:

66.249.89.100    HTTP    GET /tbproxy/lh/fixurl?hl=en-US&sd=com.au&url=http%3A%2F%2Fwww.domainerincome.com%2Ftest.php%26id%3Djohn%26session%3D123&sourceid=chrome&error=http404 HTTP/1.1

Yep, its sending it to Google alright. So that got me thinking…. what if this script just blindly accepts stuff like…. the Google home page not existing for instance ? I think I’ll leave that one for the kiddies.

3. Did I just consent for this confidential information to be analyzed by Google? Did you notice how it tried to split up the domain name into words for the search box?

Matt Cuts has stated on his blog that “I believe if Google Chrome sees a very short, stock 404 page (less than 512 bytes), it talks to Google in order to try to suggest other possible pages and options.” Interesting choice of words…. I believe….

Although there has been some healthy paranoia around the licensing agreement, I believe that your:

  • Google Account: Knows your personal information.
  • Google Mail: Analyzes email you send, and email sent to you.
  • Maps: Knows where you are - even on your mobile phone.
  • Search: Knows what you are looking for.
  • Adsense: Knows what you click on = interested in.
  • Analytics: Knows what sites you visit.
  • Checkout: Knows what you buy and who you buy it from.

Can I make it any clearer than that?

When you put it all together, this is far worse than Microsoft back in the 90’s. What do you think?


Affiliate Program | Terms & Conditions | Privacy