News for hackers. Stuff that matters.
Re:No support Linux hosting shutting down from hack by IgorPartola on Tuesday February 09, 2021 @09:28AM (#26077837)
For those interested in this kind of thing, there are two fun resources I would recommend. First, LowEndBox (https://lowendbox.com/) which documents where you can get VPS hosting for as little as $1/month or even cheaper in some instances. Second, Super Dimensional Fortress (http://sdf.org/) where for a $1 you can get lifetime low level hosting and for $25 you can get access to a much beefier server. A community of old school *nix nerds comes as a bonus.
Re:No support Linux hosting shutting down from hack by dannyw on Tuesday February 09, 2021 @10:23AM (#26078478)
Just watch out: lots of the low end box providers end up shutting down, and may take your servers and data with it.

I now stick to reputable “value” providers like BuyVM. Having an operator I can discord and get frank answers, as well as a commitment to privacy (Tor exit nodes welcomed), is nice.

Re:No support Linux hosting shutting down from hack by EricE on Tuesday February 09, 2021 @12:37PM (#26080317)
>and may take your servers and data with it.

Only if you let them.

Do people seriously NOT perform backups via independent methods utterly independent of their primary cloud service provider?

No one remembers Photobucket or the hundreds of other cloud services that went "poof" into the night?

There is no cloud, just someone else's computer - always have backups of some other means. A different provider with a different account, alternate mechanisms (i.e. email addresses with different email providers, etc.) to get to that data and accounts...

It's even easier now with VM's, snapshots, free open source backup software that understands all of that - fairly inexpensive commercial solutions like veem - there is zero excuse.

My favorite was a small SAAS provider that had all their backup infrastructure on AWS under the same account as the test/dev and operations - and someone got in and deleted it all. Partitioning - yes, it's an essential thing. And not just for technical. Separation of duties. Requiring concurrence by more than one person for critical operations. Lessons that should have been learned from past experience.

Peoples (especially developers) eyes glaze over with documents like NIST 800-53 - but all those controls exist from experience. The bigger/more critical your system is to your survival, the more of those controls you should have answers for!

Re:No support Linux hosting shutting down from hack by renewiltord on Tuesday February 09, 2021 @01:44PM (#26081097)
Honestly, they generally don't go poof. I remember I had a VPS for more than 10 years with Hetzner. No poofing till they had to get rid of that offering. I have the backups but I think now I prefer just running on GKE + RDS for funsies. Costs a bunch (like $50/mo) but I don't have to worry about anything.

And fuck me if I'm ever writing a BIND zonefile ever again.

Re:No support Linux hosting shutting down from hack by qeternity on Tuesday February 09, 2021 @06:13PM (#26083793)
> GKE + RDS

Uh what? Really?

This doubles your failure surface.

Re:No support Linux hosting shutting down from hack by renewiltord on Tuesday February 09, 2021 @06:28PM (#26083946)
True, but I only need two nines. It's my personal stuff.
Re:No support Linux hosting shutting down from hack by klodolph on Tuesday February 09, 2021 @12:15PM (#26080007)
This is one of the reasons why business negotiation books will remind you that when you’re making a deal with a vendor, you want to make a deal that is profitable for the vendor and supports / sustains their business. If you don’t, then you’ll have to find a new vendor after they collapse (or get rid of you as a client).

For personal hosting I think one of the problems that makes this more complicated is that even as a group, you’re nobody’s biggest customer. You’re just a side business for someone selling hosting B2B, usually. I know that the local grocery store will make sure that they can still sell to local customers, because that’s the core of their business; I’m not so sure that cloud providers care much about my dinky website.

Re:No support Linux hosting shutting down from hack by tacon on Tuesday February 09, 2021 @11:14AM (#26079217)
lowendbox.com was great to start, but they got popular, and then profitable, and finally were bought by a low end hosting aggregator/rollup, and now almost all the different offers on lowendbox.com are coming from essentially the same company. The sister site, lowendtalk.com, seems to have picked up the mantle of open discussions, and they have offers, too. For example, recently I bought a 1GB KVM VPS for $14.83/yr. With KVM, I can use netboot.xyz and play to my hearts content with any Linux distro I want. I have NixOS running on it at the moment. On another, I'm playing with dokku, which takes over the whole VPS as a heroku clone.

These companies are often unstable, so regular backups of anything you might be sad losing are vital. I recommend paying by the month, if that is available, and using this whitelist of low end providers who have been in business for a reasonable length of time[0].

[0] https://lowendboxes.review/the-whitelist/

Re:No support Linux hosting shutting down from hack by jart on Tuesday February 09, 2021 @12:05PM (#26079872)
I'm so glad Super Dimensional Fortress is still around. I learned how to use Unix thanks to them back in the 1990s. They're in a different league than the goofballs selling unlimited web hosting cheaper than arizona iced tea.
Re:No support Linux hosting shutting down from hack by zepatrik on Tuesday February 09, 2021 @04:48PM (#26082791)
Just had a good 2h read on internet history.
Re:No support Linux hosting shutting down from hack by TedDoesntTalk on Tuesday February 09, 2021 @12:56PM (#26080518)
This. sdf.org is awesome.
Re:No support Linux hosting shutting down from hack by cromka on Tuesday February 09, 2021 @03:33PM (#26082091)
And their VPN service is a steal!
Re:No support Linux hosting shutting down from hack by boarnoah on Tuesday February 09, 2021 @01:44PM (#26081096)
Definitely be careful with hosts off Lowendbox, as other commenters have mentioned providers go offline without warning all the time. Never pay more than a year in advance etc...

Notorious for "Deadpooling", providers sell ultra cheap hosts. Run them on over-provisioned servers for a year or two and disappear overnight.

ex: https://tech.slashdot.org/story/19/12/08/1549222/20-low-end-...

Re:No support Linux hosting shutting down from hack by lupire on Tuesday February 09, 2021 @02:10PM (#26081342)
Also nearlyfreespeech.net is old and cheap and doesn't police legal content.
Re:No support Linux hosting shutting down from hack by jodrellblank on Tuesday February 09, 2021 @02:32PM (#26081549)
> "doesn't police legal content."

What does that mean - what would it mean to "police legal content"?

Re:No support Linux hosting shutting down from hack by SkyBelow on Tuesday February 09, 2021 @04:44PM (#26082737)
I think the claim is that anything clearly legal is allowed. The problem is how iffy 'clearly' legal is. First, which country's law are we using? Second, which court rulings are we applying? Anything controversial ceases to be clearly legal because the police can go after it. Even if a well funded defense will eventually win the case, it may be on appeals meaning that punishment for the content has already begun. Thus it becomes easy to justify anything controversial as not being fully legal.

And that's assuming they'll actually try to stick to their claim. I find that isn't the case when it is really put to the test.

Re:No support Linux hosting shutting down from hack by jodrellblank on Tuesday February 09, 2021 @06:37PM (#26084017)
I get it, I was reading "police" too literally; police enforce the law, so how can you have only legal content and describe that as "not policing"? And if you have only legal content, of course you don't police it because that's redundant. "We don't filter the filtered water" you must because that's how you get filtered water, but you don't because you already have done so and it doesn't need doing again.

Un-moderated, or "we have no content policy or acceptable use policy separate from the law".

Re:No support Linux hosting shutting down from hack by retrac on Tuesday February 09, 2021 @04:38PM (#26082677)
From the context, I assume they mean kick you off the service for publishing something the hoster disagrees with.
Re:No support Linux hosting shutting down from hack by newen on Tuesday February 09, 2021 @02:56PM (#26081764)
Topical example is Parler getting shut down by AWS for whatever reason Amazon gave.
Re:No support Linux hosting shutting down from hack by seneca on Tuesday February 09, 2021 @04:29PM (#26082599)
Knowingly breaking guidelines here, with apologies, but why in the world is this downvoted? It's an accurate and timely example.
Re:No support Linux hosting shutting down from hack by jfengel on Tuesday February 09, 2021 @05:21PM (#26083202)
Saying "whatever reason Amazon gave" is a pretty good reason to downvote it. Amazon gave reasons. If you can cite them, then you can disagree with them. But to simply wave those reasons away as "whatever" is intended to convey "that was obviously legal content being shut down for purely ideological reasons", and that is simply not the case.

The "reason Amazon gave" was "content that threatens the public safety, such as by inciting and planning the rape, torture, and assassination of named public officials and private citizens", with examples given in:

https://www.courtlistener.com/recap/gov.uscourts.wawd.294664...

So it's a bad example of something being dismissed for ideological reasons, and a bad example of something whose reasons can be assumed when the answer was easily available.

That's an excellent reason to downvote something. It's simply not accurate.

Re:No support Linux hosting shutting down from hack by clarge1120 on Wednesday February 10, 2021 @01:37PM (#26093054)
“whatever reason Amazon gave” was dismissive, but also accurate. They gave a reason. The poster dismissed it and the comment was downvoted for the dismissal.

Each action was ideological.

Re:No support Linux hosting shutting down from hack by jodrellblank on Wednesday February 10, 2021 @03:19PM (#26094162)
You don't know why it was downvoted; the comment just wasn't very helpful at explaining or clear (I didn't downvote). If the reason was "unpaid bill" that would come under "whatever reason" but would that be relevant to policing anything?

Without knowing what reason Amazon gave that leaves me to go look it up; I do, and see various news site quotes including "District Judge Barbara Rothstein sided with Amazon, which argued that Parler would not take down posts threatening public safety." quote on npr.org, and "Amazon told Parler it would boot the company from its web-hosting service [...] because of repeated violations of Amazon's rules" on NYTimes.com, I try to find an official looking source of exactly what reasons Amazon gave and get to the filing for the lawsuit/legal case between Parler and Amazon[1] which includes on page 3 "17. During this same time period, AWS claims that it received reports that Parler was failing to moderate posts that encouraged and incited violence, in violation of the terms of the CSA and AWS’s Acceptable Use Policy (“AUP”). Exec. 2 Decl., ¶ 4; Ex. C (AUP). The AUP proscribes, among other things, “illegal, harmful, or offensive”". It's not clear here whether Amazon is claiming it was illegal or not, or whether it actually was illegal or not.

I google "inciting violence illegal usa" and get to a Cornell Law School[2] page on 18 U.S. Code § 2101 - Riots - saying, abridged, "whoever uses a facility of interstate commerce including but not limited to telegraph, telephone, radio, to incite a riot or promote or organize a riot, or aid or abet any person rioting or commiting any act of violence furthering a riot, shall be fined or imprisoned". Still not clear whether Parler was actually breaking the law or whether Amazon was alledging that they were, or whether this has been decided, or what exact reason Amazon gave.

I know there are arguments about whether hosts are or aren't responsible for content on them, or are just blind transmission systems, but I don't know which way it falls in which scenarios.

It reads more like a complaint about Parler being taken down than a helpful explanation, and could be more clearly and directly said "(policing legal content) means a company removing things against their content policies, even if the things are legal" in as much space and effort.

[1] https://www.courtlistener.com/recap/gov.uscourts.wawd.294664...

[2] https://www.law.cornell.edu/uscode/text/18/2101

Re:No support Linux hosting shutting down from hack by jimmydorry on Tuesday February 09, 2021 @06:22PM (#26083885)
Assuming the best from the GP, I think they might have meant "whatever" in the sense that AWS enforced their terms of service by enforcing something that they don't hold their other customers to. As you said, this could be for ideological or PR reasons.

The "whatever" being any cause they could justify their actions with.

Re:No support Linux hosting shutting down from hack by jfengel on Wednesday February 10, 2021 @12:29PM (#26092145)
Thank you; you have done a good job of steel-manning the OP. I appreciate that.

The way it was written, it doesn't surprise me that people didn't read it that way, and downvoted. It comes against a background of people loudly claiming to be oppressed for ideological reasons and failing to support that claim or acknowledging that a serious act of violence has just occurred by people professing the same ideological reasons. At the very least, I felt it was worth pointing out how it reads, so that they might consider it without requiring others to specifically seek an assumption-of-the-best.

Re:No support Linux hosting shutting down from hack by mobilio on Tuesday February 09, 2021 @12:57PM (#26080527)
It's better to get something even free like AwardSpace (https://www.awardspace.com)
Re:No support Linux hosting shutting down from hack by jcun4128 on Tuesday February 09, 2021 @12:17PM (#26080057)
> SDF

cool name (know the show)

I'll have to check these out I've been using OVH all this time, also GitHub pages is pretty cool.