Re:The ongoing story of a Dreamhost account compromise
by jcl on Tuesday March 30, 2010 @05:06PM
(#1230178)
The point I'm confused about is how a VPS would have helped the original poster. Couldn't the hacker just request a password reset from the (obliging) tech support guys?
Re:The ongoing story of a Dreamhost account compromise
by dotBen on Tuesday March 30, 2010 @08:16PM
(#1230568)
Yes, I wasn't thinking about "DreamHost VPS" (although come to mention it I do remember them offering such a service).
With most (read:good) VPS offerings the support guys won't have access to your VPS password (root, etc) and so from that perspective this would be safer and more secure for the OP. Shared hosting, by it's nature, holds a much higher chance of the hosting company holding your password in the clear/decryptable state.
My apologies if I wasn't clear in my original reply.
Re:The ongoing story of a Dreamhost account compromise
by TomasSedovic on Tuesday March 30, 2010 @05:30PM
(#1230230)
Exactly. Though I suspect that dotBen didn't realize that Dreamhost provides VPS too and thus the suggestion was to avoid Dreamhost altogether.
Secondly, Dreamhost does provide VPSes with root access as well as web hosting and domain reg.
Thirdly, VPS isn't always the right solution. You have to account for time and willingness to do the sysadmin work -- instead of spending the effort on, say, programming or marketting.
Not everybody wants to spend several extra hours up front setting up and securing a server for a simple website or webapp.
And then patching it regularly and worrying about all sorts of things that may not be related to your goal in the slightest.