Re: Domain Support Group Scum

[Dave Warren]

[EMAIL PROTECTED] wrote:

On Tue, 2003-02-18 at 19:03, [EMAIL PROTECTED] wrote:

Since RSP to RSP transfers are also automatic, this hole is really ugly.
They call my customer claiming to be their service provider and needing to
update their username and password. My customer faxes in their username and
password. Bam - their domain has been transferred to another RSP in 30
seconds. Done.

No, not really.  They still have to ack the transfer at the admin
contact email address.

Depending on how they operate, it's possible they capture the current admin email, change it, transfer the domain, and change it back. If the original domain is within OpenSRS to begin with then I suspect this could be almost entirely automated, no?

--
Dave Warren,
Email Address: [EMAIL PROTECTED]
Cell: (403) 371-3470 Fax: (403) 371-3471
Toll free: (888) 371-3470 Vonage: (817) 886-0860
ICQ: 17848192 AIM: devilspgd Yahoo!: devilspgd
MSN/PASSPORT: [EMAIL PROTECTED]