Hacker News Reader

> The only reason they couldn't fully steal DNS settings was I had 2FA enabled with my registrars and on my email account

This sounds like they had your password?

View on HN

Also seems like CF jumped the gun on letting their servers serve content to their own servers -- seems like CF fucked up too.

Like, when you are CF big you can't just start resolving domains however you feel because folks use your DNS service.

If their 8.8.8.8 resolver was returning results from customer accounts that weren't verified, like the GP seems to imply, that seems like a huge security problem.

1.1.1.1 ... 8.8.8.8 is google :)

but ... but ... but!

free markets!

/s

This is not a free market issue. Free market does not mean companies can do what they want.

Hence the "/s" :)

Nope - they didn't change anything with the registrars

But Cloudflare still let them start making DNS entries

Reply on news.ycombinator.com