Cloud Provider DigitalOcean Exposes Users' VM Data

Posted by signifiers on Tuesday April 02, 2013 @09:49PM
from the wired.com dept.

http://www.wired.com/wiredenterprise/2013/04/digitalocean/

( 4 comments | 9 points | on HN )

Re:Cloud Provider DigitalOcean Exposes Users' VM Data by WestCoastJustin on Wednesday April 03, 2013 @12:02AM (#5484144)

Rackspace/Slicehost & VPS.NET were identified for the same issue April 2012 [1]. Cloud providers MUST securely erase customer media upon release, so that this attack cannot happen.

[1] https://news.ycombinator.com/item?id=3890905

[ Parent | on HN ]

Re:Cloud Provider DigitalOcean Exposes Users' VM Data by rammark on Wednesday April 03, 2013 @03:24AM (#5484749)

I hope that part of their follow-up to this includes information about not being able to fully trust that non-encrypted data on SSD drives can be 100% wiped. Users of hosting services should not be storing extremely sensitive unencrypted information on any shared hardware.

[ Parent | on HN ]

Re:Cloud Provider DigitalOcean Exposes Users' VM Data by voidlogic on Wednesday April 03, 2013 @09:14AM (#5485787)

They fixed it: https://www.digitalocean.com/blog_posts/resolved-lvm-data-is...

[ Parent | on HN ]

Re:Cloud Provider DigitalOcean Exposes Users' VM Data by dannowatts on Wednesday April 03, 2013 @02:08AM (#5484565)

ouch...

[ Parent | on HN ]