Going to share a little update related to my security incident Monday. Going to keep it terse for now, because I still have work to do, to fully put my mind at ease, but a few things I wanted to get out there for others, and I now have secured danfinlay.com to a degree where I no longer feel threatened by some self righteous sysadmins.

The compromise was of my main danfinlay.com domain. It was a domain I'd had on the same registrar (asmallorange) since I'd first gotten it almost 20 years ago. It was a small shop, but I'd never had issues with them, so it felt very lindy. I didn't realize they sold to web.com, and I didn't realize how bad web.com security was.

co founder of @metamask . Making computers behave for us.

The registrar claimed they locked down the account, and no attacker had my domains/emails anymore, but they were wrong. They had left an email forwarder on their servers (not visible on public DNS records) to the attacker's address. That forward is how the attacker performed a password reset/login using the warpcast web interface.

The domain was compromised at least a month ago, and I became aware of it because the attacker attempted (and failed) to takeover my twitter/X account (thanks 2FA!). Twitter locked down the account very well (I still don't have access, but neither does an attacker), but the DNS registrar was deceptive:

Thanks for sharing, Dan

What a wild story 😱

This has happened with Dan multiple times. Nevermind the fact that the official MetaMask account was gaslighting people about this entire post of his to begin with, saying it never happened and the screenshots were fake. 

Trust absolutely nobody in this space. And don’t put anything past anyone to pull this type of stuff.

Metamask makes $1M in swap fees.

Weekly.

What do you think is more likely? 
- Dan tells the truth
- Dan is this evil scammer going for (relative) pennies, and despite having grown the most successful web3 wallet from nothing, for some reason he has cartoon character levels of bad planning when it comes to scams

You’ve done this stunt before. Fool me once…

Not really sure why you consider what you’ve done worth it

Welcome back, Dan! Let's experiment memecoins now :))

security is a journey, not a destination. take your time.