HackedThat: Breaking in to a hardened server via the back door

Re:HackedThat: Breaking in to a hardened server via the back... by ryanlol on Thursday August 25, 2016 @04:37PM (#12362286)

Oh, but last I checked lish was an INCREDIBLY (can't emphasise this enough) insecure hack around screen(1)[1] 2FA doesn't help you a bit.

Moral of the story is not to trust your provider. Don't use cloud if you don't need it, don't let your host have your ipmi crdentials, run FDE (this has saved several bitcoin exchanges from losing millions).

[1]. Here's one particularly funny thread from their support forum that perfectly captures exactly how much of a mess this setup was (is? I haven't hacked linode lately): https://forum.linode.com/viewtopic.php?t=3231%3E

[ Parent | on HN ]

Re:HackedThat: Breaking in to a hardened server via the back... by nickpsecurity on Thursday August 25, 2016 @06:26PM (#12362978)

"I put in a support ticket about this back in December 2007." (source: comment in mid-2008)

Usually a bad sign by itself lol...

[ Parent | on HN ]