I just saw this upcoming on digg, there's a huge security hole at dynadot where you can get any domain they have registered pushed to yourself. http://www.berlettefx.com/2007/01/5/exploiting-dynadot/