Linode Forum
Linode Community Forums 		 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic

Board index » Linux Community Forums » General Discussion
  Previous topic | Next topic 
Author Message
tonymallin
 Post subject:
PostPosted: Wed Apr 18, 2012 2:55 pm 
Offline
Senior Newbie

Joined: Mon Jan 31, 2011 8:57 am
Posts: 18
Typo wrote:
AVonGauss wrote:
What does proprietary have to do with anything here? However they gained access, once you have access through Linode's proprietary system or your favorite open source Xen manager - you have access.

It has a lot to do with it, with "my favorite open source" app, everyone can see the code, if its unsafe, its usually discovered and reported and fixed. In this case, we just have to trust them.

AVonGauss wrote:
Its not unusual, but you also have to have a realistic expectation and beating it to death does not help. They have been responding, you just don't seem satisfied.

I don't feel I've beaten anything to death. I voiced a concern in reply to a post (in 2 different threads granted) and have responded to replies to those posts. Also, nobody with any authority has responded to any of the posts regarding this, nor has any announcement relating to it been released since we were told to expect one. I fail to see where "they have been responding" unless your referring to the recent security enhancements which again would just be assumption.

I just personally think that this long after the incident, the situation should be resolved and the announcement should have been made.

I want to say again. I love this place and think its a great service and I am in no way trying to start an argument or troll.


If Linode has chosen to investigate with the authorities then they may be legally obliged not to respond.
Top
   
Reply with quote  
vonskippy
 Post subject:
PostPosted: Wed Apr 18, 2012 5:44 pm 
Offline
Senior Member
User avatar

Joined: Sun Dec 27, 2009 11:12 pm
Posts: 1038
Location: Colorado, USA
tonymallin wrote:
If Linode has chosen to investigate with the authorities then they may be legally obliged not to respond.

Except they could say "Due to ongoing investigations, we're unable to comment at this time."

Instead, they just ignore all the chatter.

My guess, people will start voting on their "opaque transparency" with their feet (or should that be wallet?).

They still list their "Marketing Guru" as open on their "We're Hiring" page, so no big surprise that there isn't any real change in how they handle stuff like this.
Top
   
Reply with quote  
ericholtman
 Post subject:
PostPosted: Wed Apr 18, 2012 5:49 pm 
Offline
Senior Member

Joined: Sun Sep 05, 2010 8:55 pm
Posts: 97
vonskippy wrote:
Instead, they just ignore all the chatter.


It doesn't matter where you draw the line here, *someone* is going to be unhappy.

Me? I'm happy.
Top
   
Reply with quote  
sednet
 Post subject:
PostPosted: Fri Apr 20, 2012 3:44 am 
Offline
Senior Member
User avatar

Joined: Wed Mar 17, 2004 4:11 pm
Posts: 554
Website: http://www.unixtastic.com
Location: Europe
ericholtman wrote:
vonskippy wrote:
Instead, they just ignore all the chatter.


It doesn't matter where you draw the line here, *someone* is going to be unhappy.

Me? I'm happy.


I'm not really happy. It appears linode lost a customer support interface account that lets whoever uses it change the root password on any linode. We got lucky that the attacker appeared to be one guy with an interest in BitCoins. It could easily have been a hundred plus script kiddie hackers who could have prepared tools to loot these machines in advance. With one big server outside they could have copied off everything that looked remotely interesting from every Linode and sorted though it later.
Top
   
Reply with quote  
Mr Nod
 Post subject:
PostPosted: Fri Apr 20, 2012 9:26 am 
Offline
Senior Member
User avatar

Joined: Tue Mar 17, 2009 5:11 am
Posts: 129
Location: UK
Do these posts actually get read by the Linode hierarchy though? Otherwise this is just flogging a dead horse...
Top
   
Reply with quote  
Guspaz
 Post subject:
PostPosted: Fri Apr 20, 2012 10:13 am 
Offline
Senior Member
User avatar

Joined: Tue May 26, 2009 3:29 pm
Posts: 1691
Location: Montreal, QC
Mr Nod wrote:
Do these posts actually get read by the Linode hierarchy though? Otherwise this is just flogging a dead horse...


Every post on these forums is read (or at least skimmed) by Linode (don't know if Caker has the time to read them all himself).
Top
   
Reply with quote  
sednet
 Post subject:
PostPosted: Fri Apr 20, 2012 10:46 am 
Offline
Senior Member
User avatar

Joined: Wed Mar 17, 2004 4:11 pm
Posts: 554
Website: http://www.unixtastic.com
Location: Europe
Mr Nod wrote:
Do these posts actually get read by the Linode hierarchy though? Otherwise this is just flogging a dead horse...


Unless Caker has had a personality transplant in the last few years he reads and cares about what people say here.

I wish I knew what he really thought about this. He must know that Linux hobbyists are an awkward bunch and won't just forget about something as serious as this.
Top
   
Reply with quote  
nehalem
 Post subject:
PostPosted: Fri Apr 20, 2012 11:17 am 
Offline
Senior Member

Joined: Fri Jan 20, 2012 11:19 am
Posts: 100
Quote:
We maintain a strong security policy and aim to communicate openly should it ever be compromised.


For me and some of the others (I'm assuming), the little official information we got could in no way be construed as Linode "communicating openly" about what happened.

_________________
If all else fails, reboot...
PHP Tutorials and MySQL Tutorials
Top
   
Reply with quote  
mnordhoff
 Post subject:
PostPosted: Fri Apr 20, 2012 6:34 pm 
Offline
Senior Member

Joined: Sat May 03, 2008 4:01 pm
Posts: 569
Website: http://www.mattnordhoff.com/
sednet wrote:
Unless Caker has had a personality transplant in the last few years he reads and cares about what people say here.

Rackspace bought his personality to use as the basis for their Fanatical Support. Now he's a grumpy BOFH. :(

_________________
Matt Nordhoff (aka Peng on IRC)
Top
   
Reply with quote  
graq
 Post subject:
PostPosted: Mon Apr 23, 2012 5:10 am 
Offline
Senior Member

Joined: Sat Nov 13, 2010 3:05 am
Posts: 91
Website: http://www.graq.co.uk
A certain competitor has been emailing it's customers explaining a security issue that existed and has now been fixed. Perhaps Linode are experiencing the same issue, but haven't found the fix yet.
Top
   
Reply with quote  
Typo
 Post subject:
PostPosted: Mon Apr 23, 2012 5:18 am 
Offline
Junior Member

Joined: Mon Sep 19, 2011 2:48 am
Posts: 28
graq wrote:
A certain competitor has been emailing it's customers explaining a security issue that existed and has now been fixed. Perhaps Linode are experiencing the same issue, but haven't found the fix yet.

I kind of assumed it was something in the manager but like every other idea we all throw out its just guess work and assumption because nobody who knows is talking.

How about more details just in case your hypothesis proves true?
Top
   
Reply with quote  
ericholtman
 Post subject:
PostPosted: Mon Apr 23, 2012 7:56 am 
Offline
Senior Member

Joined: Sun Sep 05, 2010 8:55 pm
Posts: 97
Typo wrote:
How about more details just in case your hypothesis proves true?


Hey.... I had a dream last might where aliens from Zabron 9 broke in and stole some accounts.

Should caker sign on and deny this too?
Top
   
Reply with quote  
nehalem
 Post subject:
PostPosted: Mon Apr 23, 2012 8:51 am 
Offline
Senior Member

Joined: Fri Jan 20, 2012 11:19 am
Posts: 100
ericholtman wrote:
Typo wrote:
How about more details just in case your hypothesis proves true?


Hey.... I had a dream last might where aliens from Zabron 9 broke in and stole some accounts.

Should caker sign on and deny this too?


You don't need to be silly. You indicated that you are happy with the little information you got. We get it. Now, there are others who are not happy with the little information they got, and I think reasonably so.

Basically you're not helping.

_________________
If all else fails, reboot...

PHP Tutorials and MySQL Tutorials
Top
   
Reply with quote  
ericholtman
 Post subject:
PostPosted: Mon Apr 23, 2012 9:08 am 
Offline
Senior Member

Joined: Sun Sep 05, 2010 8:55 pm
Posts: 97
nehalem wrote:
You don't need to be silly.


Some other competitor reports some other security breach on some other platform, and someone here wants a response to that, and *I'm* being silly?
Top
   
Reply with quote  
Typo
 Post subject:
PostPosted: Mon Apr 23, 2012 9:51 am 
Offline
Junior Member

Joined: Mon Sep 19, 2011 2:48 am
Posts: 28
ericholtman wrote:
nehalem wrote:
You don't need to be silly.


Some other competitor reports some other security breach on some other platform, and someone here wants a response to that, and *I'm* being silly?

I asked for more information since the info he gave was seriously lacking. If he was honestly curious if the security issues were at all related, which I already sort of pointed out that I don't think it is, then he will need to provide more information.

We have enough lack of information in this thread to go around, I was just trying to lessen it a bit.

You are obviously posting simply to start trouble while we have an honest desire to get answers that were promised us and are directly related to the safety of our vps's.

Yes, YOU are being silly.
Top
   
Reply with quote  
Display posts from previous:  Sort by  
Post new topic  Reply to topic

Board index » Linux Community Forums » General Discussion


Who is online

Users browsing this forum: No registered users and 9 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group