Re: Namecheap
> That Graham guy made an irresponsible disclosure.
I didn't disclose anything.
Kirk McElhearn wrote the blog post (I merely retweeted it, much to Namecheap's annoyance).
And Kirk didn't irresponsibly disclose anything either. He just reported that an unauthorised party had created subdomains for his domain via Namecheap, but he *didn't* (because both he and I simply don't know) explain how it was done.
As far as I can see Namecheap still hasn't informed affected customers.