Security Notification and Linode Manager Password Reset

Re:Security Notification and Linode Manager Password Reset by ryanlol on Tuesday January 05, 2016 @03:23PM (#10845740)

We were aware of it for probably an year before anyone bothered to spend 10 minutes looking at coldfusion source. That's all the time it took.

[ Parent | on HN ]

Re:Security Notification and Linode Manager Password Reset by mapgrep on Tuesday January 05, 2016 @05:41PM (#10846675)

V interesting. Do any of the other VPS providers strike you as more secure alternatives?

[ Parent | on HN ]

Re:Security Notification and Linode Manager Password Reset by ryanlol on Tuesday January 05, 2016 @06:13PM (#10846912)

I'd avoid VPS providers in general, but AWS is on a whole different level than linode. They actually understand what they're doing well enough to do live xen patching etc.

But yeah, people get hacked through their hosts all the time. Best approach is colo with minimum access for the dc staff.

[ Parent | on HN ]

Re:Security Notification and Linode Manager Password Reset by nickpsecurity on Tuesday January 05, 2016 @08:27PM (#10847724)

That's been my recommend for a long time. Plus, I liked obfuscating with unusual CPU choices and network guards (esp for protocol layers). Worked wonders with about no effort outside setting up guards. Opponents throw so much x86 shellcode at your Alpha, etc boxes while never quite getting stuff to run.

[ Parent | on HN ]