News for hackers. Stuff that matters.

A comment on DigitalOcean leaks customer data between VMs.

Re:DigitalOcean leaks customer data between VMs by 0x0 on Monday December 30, 2013 @12:12AM (#6983141)
It would be interesting to see a survey of the various cloud VM services; if any of them will return non-zero (data) blocks for uninitialized storage.

Sounds like a major risk if SSH, SSL, passwords etc can leak this easily.

[ Parent | on HN ]
Re:DigitalOcean leaks customer data between VMs by coolj on Monday December 30, 2013 @12:38AM (#6983215)
Also, even if they zero the primary block device, what about swap if it's provided as a separate block device?
[ Parent | on HN ]
Re:DigitalOcean leaks customer data between VMs by jlawer on Monday December 30, 2013 @12:45AM (#6983232)
DO provide a single block device (so swap is on the same block device), that gets zeroed if you set the scrub data option.
[ Parent | on HN ]