Re:If you didn't cancel the credit card you used for linode....
by jmillikin on Thursday June 06, 2013 @04:43PM
(#5835050)
But that's not what Linode did. Linode put the private key right next to the public key, where anyone who compromised their web frontend could get at it.
If they had kept their private key where it belonged, we wouldn't be having this discussion because their security alert would have said "...and we have verified that no credit card data was accessed".
Re:If you didn't cancel the credit card you used for linode....
by dllthomas on Thursday June 06, 2013 @05:13PM
(#5835207)
And the problem was the private key being on the server running the web front-end, and that's what should be criticized. Presence of a public key does not a webserver make.
If they had kept their private key where it belonged, we wouldn't be having this discussion because their security alert would have said "...and we have verified that no credit card data was accessed".