Re:We moved our servers to Iceland
by philliphaydon on Saturday March 30, 2019 @06:03AM
(#19528670)
“If they’re a real business” - this is the sort of dribble HN is reduced to? A real business can’t run on a VPS?
It's not that a "real business" that talks about FDE, and has moved to Iceland for better security, can't run on hosted VPS. But they're being disingenuous if they do so.
But what I mainly meant is that a "real business" can afford to build secure servers, ship them to Iceland, and send trusted staff to set up and configure them.
Re:We moved our servers to Iceland
by philliphaydon on Saturday March 30, 2019 @08:12AM
(#19529023)
Ok cool. Now I understand very clearly. Thank you.
I believe the point here is that they claim that they care about security, while their Icelandic VPS hosting provider can just dump the host server memory, which would include the encryption keys.
Re:We moved our servers to Iceland
by philliphaydon on Saturday March 30, 2019 @07:20AM
(#19528880)
Then can’t we say that? “If they truly cared about security they wouldn’t use a VPS”. It just rubs me the wrong way the way it’s worded.
Yes, I should have been clearer. Sorry.
This is a good point. We are moving to a dedicated server to resolve this issue.
Yeah, here it does seem security theater.
But still, it was a good writeup. I mean, dropbear and all.
I have no clue why they're using VPS, after all that. I mean, if they're a real business, they ought to just setup a server, and ship it to Iceland. If the want the ease of VPS, it's easy to do secure KVM in a FDE server. Even with Docker containers within KVM, if you like.