Pretty Scary!! Anybody can get your account number in only 4 clicks and all they need to know is your domain name you have registered with NSI! With Over 6.68 Millions domain names at NetworkSolutions.com, I think this is a serious flaw in their system!
You need a "userid" and "password" to log into your account at NSI. When you log in, you can use either your account number, email address, or any name or number you choosen and your password. With having your account number available to anybody, that gives somebody half access to your account no matter what you have set for your "user id".
If a hacker can figure out the other part (password)…. you know what can happen from their!
I will clearly not say or show how to do this, but this is one reason I no longer have any domain names with NSI. If you do not like the fact that anybody can get your account number at NSI and instantly have half access to your account, Let NSI Know You Are Upset About It and you want this fixed ASAP!
I think I have ALL my domain names with the two most secure domain registrars and they are the only ones I use. Godaddy.com & Moniker.com !
I hope to see this post make a fire storm and NSI changes this TODAY!
UPDATE: I just got a call from David Morse from NetworkSolutions.com and I explained the situation to him. He is looking into this and after some chatting he could see what I was talking about and will take action if needed and report back to me when he finds out more info… more to come but it sure is nice when a company responds! Thank you NSI for that! I would of used their email system, but I Know from past experiances that I wouldn’t of heard anything for 3 days.
Connie Bensen
Hi,
I’m checking into this & will get back to you.
Connie @ Network Solutions
Connie Bensen
This is true anywhere. A username is generally apparent (first initial last name or my email address) so that’s a given. The crux of the matter is that it IS important for people to choose passwords that are hard for hackers to figure out.
I was impressed when I created an account with Network Solutions. The password requirements were much higher than most places (I had to write mine down). The instructions specifically say:
Choose a password that is easy to remember or keep a copy of your password in a safe place. Password needs to be 8-16 characters in length & must include at least one upper case, one lower case, and one numeric character.
If you have additional concerns, please contact us at smedia@networksolutions.com
Connie @ Network Solutions
**Jamie Says**
Thank you Connie for the reply. Saying “This is true anywhere” is not a very clear reply. I know user id’s are more avilable, but NOT Account Numbers.. That is why I think this needs to be addressed and I think will be taken care of very shortly after speaking with David Morris from NSI. I do agree passwords are VERY important and having a 9 character one be hacked for this blogs admin not that long ago scared me! Account Numbers are just something NO company should have available on their sites.
Jack
Here are NameCheap.com discount coupons for September:
LABORDAY: With this coupon code you can register a .com for $7.98
INTERFACE: With this coupon code you will get $0.93 off.
BACK2SCHOOL
SEPTEMBERISHERE: $8.41 renewals
TRANSCHEAP: Transfer your domain to namecheap.com for just $5.99