4 ms·

That's bad, really bad. No 2auth can save you from humans who do support. I also had one of my VPS attacked recently, and I feel for you. But the name nameche

That's bad, really bad. No 2auth can save you from humans who do support. I also had one of my VPS attacked recently, and I feel for you. But the name namecheap says "cheap". Maybe they are indeed cheap? I'm not sure the same would have happened with say HE. You pay, but you know what you pay for and get in return. Personally, I am thinking about moving from a "manually setup" distribution to a "no ssh but deploy", so as to ease reimaging in the future. This way, if a server is compromised, all I have to do it to start the install of a new one. Any suggestion for tools to do that with Debian distro? (yeah I could write a shell script, but I think there must be better tools out there)

zeveb 11y ago
> No 2auth can save you from humans who do support. Well, conceivably the second factor could be used to generate crypto key material which is used to decrypt/unlock one's record, so without the second factor even support couldn't read & edit one's record. Nothing can stop support from deleting & recreating a record though.
stephenr 11y ago
> Any suggestion for tools to do that with Debian distort? If you write apps, package them as Debs. If you need to configure other Debs, make config packages with config-package-dev [1] from the DebAthena project. Create a metapackage that depends on your software + config packages, and your setup process just needs to be "add private apt repo, apt update, apt install <metapackage>". [1] https://packages.debian.org/jessie/config-package-dev https://packages.debian.org/jessie/config-package-dev
- voltagex_ 11y ago
  This is fantastic, I wish I'd known about this earlier. Now I just need a way of testing Debian preseed faster than spinning up VMs, and I'll be set.