Hacker News Reader

I manage a bare metal server rented at OVH, and when I discovered their kernel wasn't the stock one, I also found its last update was months before, without all the security patches released since then.

That's not advertised at all in their product pages, and it exposes you to a bunch of security issues elsewhere fixed.

View on HN

To be fair, that's just the default setup. It's 2 commands to update it to the normal stock kernel.

I know and I did that as soon as I discovered they ship a different kernel.

The problem is they don't advertise "we ship an insecure kernel by default", and they call those insecure images "Ubuntu".

May I ask what are those 2 steps?

sudo apt update && sudo apt upgrade -y

That wouldn't work (even if you should do that anyway). The stock kernel is in a separate package.

Check out this post: http://www.sysadminworld.com/2012/how-to-switch-to-the-stand...

Reply on news.ycombinator.com