27 ms·

At least they are aware of the issue and warning their customers. A lot of companies would just fix the issue (or not even that) and try to silently sweep it u

by jjuhl 11y ago

At least they are aware of the issue and warning their customers. A lot of companies would just fix the issue (or not even that) and try to silently sweep it under the rug.

kuschku 11y ago
Their business is being a trustworthy, high quality service. Sweeping it under the rug would destroy their business. (Not that competitors wouldn’t have done it anyway)
- chx 11y ago
  > Their business is being a trustworthy, high quality service. Really. Here I thought their business is renting out servers made from desktop parts for insanely low amounts of money. I have no problems with this strategy, I enjoy my 42EUR a month 2x3TB HDD + 2x120GB SSD, 16GB i7 2600 server, thanks much. It runs hobby sites and such. I know what I bought and what I can expect.
  - 5ersi 11y ago
    They also offer reasonably priced server-class dedicated servers with Xeon processors, ECC memory and datacenter-series SSDs.
    - merb 11y ago
      "reasonably priced". You never needed a private network with 3 nodes.
      - corford 11y ago
        €12,61/month extra per server and a one off ~€25 for the switch is hardly extortionate given what they charge for servers...
        merb 11y ago
        no. you've forgotten something. you need to pay at least the flexi pack for ever server, too. So your math is Switch + 12.95/month (per server) + 15 /month (per server) and now you outpriced nearly every cloud.
        corford 11y ago
        The €12,61 I mentioned is the Flexi-Pack charge (just without VAT). There are no other costs apart from a one off charge of ~€25 to install a switch.
        merb 11y ago
        with the flexi pack you need to pay an additional cost of the second network card you need.
        corford 11y ago
        Ah ok. I've only ever rented servers from them that already had a second NIC present (so I just needed to pay the flexi-pack charge to activate it). Didn't realise they also sold servers with single NICs.
        merb 11y ago
        Most of them are. Only if you use the "bigger" ones which aren't cheaper than the cloud providers anyway so. If you care for pricing it's cheaper to either have a colocation or a cloud or a own datacenter. renting servers is mostly not cheap if you need more than a single server. I mean most people's need definitely suites inside the cloud since they don't need to have the full capacity 24 hours. There are some other people who need the full capacity every time, but if you run a globally distributed services you mostly run into other problems than datacenter costs.
        corford 11y ago
  - corford 11y ago
    They do offer cheap and cheerful desktop grade gear but their PX and R ranges are server grade (Xeon chips, ECC memory etc). They offer PowerEdge boxes too. I've been a customer for a while but needed some spare, cheap server grade boxes this month. Decided to give their server bidding system a try and picked up two 32GB quad-core Xeon boxes (with 2x3TB SATA disks, Intel NICs and unlimited bandwidth) for €39/month each. So far, no complaints.
- jafingi 11y ago
  High quality service isn't exactly what pops into mind when I think of Hetzner...
arjie 11y ago
Not that I'm saying anyone wouldn't try it but how would you even sweep it under the rug? Either you quietly regenerate host keys, in which case all your clients will get a host key mismatch when they try logging in, or you fix it in new images and leave everyone exposed and someone will notice the host key being the same at some point. It's a pretty noisy flaw and one that's common on virtualized platforms deployed from an image.
- jjuhl 11y ago
  You could try to hide it in several ways: 1) just don't say anything and hope nobody notices. 2) fix the underlying problem and then regenerate all keys and post some nonsense saying they had to do so for some "not their fault bullshit reason". 3) remove support for the key/cipher type affected with some bs reason and force all customers to use something else. And some creative persons can probably come up with more... Good on them that they acknowledged the problem. Warned customers and provide instructions on how to fix things. Makes me want to consider them if I ever need a service like theirs in the future.
  - detaro 11y ago
    2) and 3) are not really viable/realistic with the kind of service Hetzner offers -> if they just went in and modified customer systems, possibly breaking stuff in the process, they'd be in even more trouble.

by jjuhl 11y ago

At least they are aware of the issue and warning their customers. A lot of companies would just fix the issue (or not even that) and try to silently sweep it under the rug.

kuschku 11y ago

Their business is being a trustworthy, high quality service. Sweeping it under the rug would destroy their business. (Not that competitors wouldn’t have done it anyway)

chx 11y ago
> Their business is being a trustworthy, high quality service. Really. Here I thought their business is renting out servers made from desktop parts for insanely low amounts of money. I have no problems with this strategy, I enjoy my 42EUR a month 2x3TB HDD + 2x120GB SSD, 16GB i7 2600 server, thanks much. It runs hobby sites and such. I know what I bought and what I can expect.
- 5ersi 11y ago
  They also offer reasonably priced server-class dedicated servers with Xeon processors, ECC memory and datacenter-series SSDs.
  - merb 11y ago
    "reasonably priced". You never needed a private network with 3 nodes.
    - corford 11y ago
      €12,61/month extra per server and a one off ~€25 for the switch is hardly extortionate given what they charge for servers...
      - merb 11y ago
        no. you've forgotten something. you need to pay at least the flexi pack for ever server, too. So your math is Switch + 12.95/month (per server) + 15 /month (per server) and now you outpriced nearly every cloud.
        corford 11y ago
        The €12,61 I mentioned is the Flexi-Pack charge (just without VAT). There are no other costs apart from a one off charge of ~€25 to install a switch.
        merb 11y ago
        with the flexi pack you need to pay an additional cost of the second network card you need.
        corford 11y ago
        Ah ok. I've only ever rented servers from them that already had a second NIC present (so I just needed to pay the flexi-pack charge to activate it). Didn't realise they also sold servers with single NICs.
        merb 11y ago
        Most of them are. Only if you use the "bigger" ones which aren't cheaper than the cloud providers anyway so. If you care for pricing it's cheaper to either have a colocation or a cloud or a own datacenter. renting servers is mostly not cheap if you need more than a single server. I mean most people's need definitely suites inside the cloud since they don't need to have the full capacity 24 hours. There are some other people who need the full capacity every time, but if you run a globally distributed services you mostly run into other problems than datacenter costs.
        corford 11y ago
- corford 11y ago
  They do offer cheap and cheerful desktop grade gear but their PX and R ranges are server grade (Xeon chips, ECC memory etc). They offer PowerEdge boxes too. I've been a customer for a while but needed some spare, cheap server grade boxes this month. Decided to give their server bidding system a try and picked up two 32GB quad-core Xeon boxes (with 2x3TB SATA disks, Intel NICs and unlimited bandwidth) for €39/month each. So far, no complaints.
jafingi 11y ago
High quality service isn't exactly what pops into mind when I think of Hetzner...

arjie 11y ago

Not that I'm saying anyone wouldn't try it but how would you even sweep it under the rug? Either you quietly regenerate host keys, in which case all your clients will get a host key mismatch when they try logging in, or you fix it in new images and leave everyone exposed and someone will notice the host key being the same at some point. It's a pretty noisy flaw and one that's common on virtualized platforms deployed from an image.

jjuhl 11y ago
You could try to hide it in several ways: 1) just don't say anything and hope nobody notices. 2) fix the underlying problem and then regenerate all keys and post some nonsense saying they had to do so for some "not their fault bullshit reason". 3) remove support for the key/cipher type affected with some bs reason and force all customers to use something else. And some creative persons can probably come up with more... Good on them that they acknowledged the problem. Warned customers and provide instructions on how to fix things. Makes me want to consider them if I ever need a service like theirs in the future.
- detaro 11y ago
  2) and 3) are not really viable/realistic with the kind of service Hetzner offers -> if they just went in and modified customer systems, possibly breaking stuff in the process, they'd be in even more trouble.