News for hackers. Stuff that matters.

A comment on The ongoing story of a Dreamhost account compromise. Parent comment

Re:The ongoing story of a Dreamhost account compromise by jcl on Tuesday March 30, 2010 @05:06PM (#1230178)
The point I'm confused about is how a VPS would have helped the original poster. Couldn't the hacker just request a password reset from the (obliging) tech support guys?
[ Parent | on HN ]
Re:The ongoing story of a Dreamhost account compromise by dotBen on Tuesday March 30, 2010 @08:16PM (#1230568)
Yes, I wasn't thinking about "DreamHost VPS" (although come to mention it I do remember them offering such a service).

With most (read:good) VPS offerings the support guys won't have access to your VPS password (root, etc) and so from that perspective this would be safer and more secure for the OP. Shared hosting, by it's nature, holds a much higher chance of the hosting company holding your password in the clear/decryptable state.

My apologies if I wasn't clear in my original reply.

[ Parent | on HN ]
Re:The ongoing story of a Dreamhost account compromise by TomasSedovic on Tuesday March 30, 2010 @05:30PM (#1230230)
Exactly. Though I suspect that dotBen didn't realize that Dreamhost provides VPS too and thus the suggestion was to avoid Dreamhost altogether.
[ Parent | on HN ]