Hacker News Reader

Comment by codygman | Hacker News Reader

With the way that Linode recently handled the hack which exposed customer CC's and data[1], I would find it hard to have any peace of mind with them.

I don't know if DO would fare any better, and they have issues[2] of their own though.

Evaluating the two, DO makes me less uncomfortable and costs less.

1. http://news.ycombinator.com/item?id=5552756 2. https://news.ycombinator.com/item?id=6983097

View on HN

"With the way that Linode recently handled the hack which exposed customer CC's and data[1], I would find it hard to have any peace of mind with them."

I hear this repeated over and over but did you just read the headline and draw your own conclusion? From all the articles I read, the hacker maybe got some worthless encrypted cc data. I don't think anyone lost sleep over this and kudos to Linode for encrypting user data. Also the breach had nothing to do with the individual VPS accounts.

Around that same time Amazon had the most epic multi-day outage in history and their storage servers were leaking user data. By comparison, the Linode hack wasn't a big deal, IMO.

PS: As far as Linode holding back information, were you a Linode cusotomer last year or are you just repeating rumors? Your Slashdot article was posted April 15th. Linode announced the "security incident" on the 12th https://blog.linode.com/2013/04/12/security-notice-linode-ma... also https://blog.linode.com/2013/04/16/security-incident-update/ I did not get the impression they were holding back information.

You can judge which you think is worse, but the facts are that Linode got hacked and hid it for as long as possible.

I don't care what the hackers got per se, just that Linode was so opaque. However, the opaqueness in light of credit cards being stolen (encrypted or not (can most likely be decrypted anyway)) is even worse imo.

Their databases have been un-encrypted ever since they began their business. I used to hang out with "crackers" in ~2007 and at that time the database was already available to a certain group of people. All CC's plain-text, same with passwords.

I suspected this and thought I heard about it somewhere, but I didn't have any proof of it. Thanks for adding the input. Provided this is true, it makes me even more skeptical of Linode.

<snide> Though I'm skeptical enough of anyone still using Cold Fusion. </snide>

Well, to be fair, you still have only "heard about it somewhere", and still don't "have any proof of it" (unless you really trust the parent commenter, and I see the account was created 3 days ago).

Not saying you should trust Linode, but that your confidence in thar rumour probably shouldn't have improved after the parent comment.

I agree actually. It's easy to agree with confirmation bias sometimes though, lol.

Was a phpBB hack at the time. Injecting SQL trough the restore database option, good old days.

Reply on news.ycombinator.com