3 ms·

Why do you hate then so much? They are just another hosting company, I'm sure your can find holes and dirt on all of them? Why not attack an organisation that

Why do you hate then so much? They are just another hosting company, I'm sure your can find holes and dirt on all of them? Why not attack an organisation that is "more evil" ?

ryanlol 9y ago
First of all I need to clarify that I'd likely be making these posts even without my personal interactions with Linode, just as I'd advice against using SSL 2.0 or gasp ColdFusion if I saw someone using them. I'm certainly not alone in recommending against Linode, any sane security person will share the sentiment. >Why do you hate then so much? I don't really "hate" Linode, but I certainly don't wish them luck. Why? They wasted a bunch of my time because some guy with a very thick Aussie accent prank called them and the police while introducing himself as me. >Why not attack an organisation that is "more evil" ? I can do both, although I'm hardly "attacking" Linode. I'm simply pointing out their very poor track record, which is an indisputable fact. Why advice folks away from a hosting provider that covers up known breaches for months? https://news.ycombinator.com/item?id=10845985 https://news.ycombinator.com/item?id=10845985 Or one that tells their employees to lie about breaches? https://imgur.com/sJd56AT https://imgur.com/sJd56AT Or one that refused for years to spend a couple of minutes thinking about security, until it started to actually hurt their bottom line? As jsmthrowaway points out, Linode was aware of serious security issues for years and did exactly nothing to protect their customers. https://news.ycombinator.com/item?id=14572970 https://news.ycombinator.com/item?id=14572970
- unabst 9y ago
  If not for the info you provided I may have wasted my time with them. Honestly, I was wondering if Linode staff or people on "their side" downvoted the post since it didn't seem downvote worthy. It's only fair that their track record follow them, especially their free press. It wasn't a rant or an accusation or anything personal. It was just a list of their past actions and what others had to say about it.
  - ryanlol 9y ago
    If you want trustworthy cloud hosting look at EC2 and GCE. Avoid digital ocean, they have a long history of account hijackings due to "social engineering" attacks. Otherwise look at dedicated hosting, preferably colocation but just renting servers can be cheaper and isn't so bad. Encrypt your drives, either disable your IPMI thing completely or ensure that it's only accessible over a VPN by you only and not your host. OVH (and their other brands) might be a decent cheap choice for dedicated hosting that should be very competitive in Linodes price bracket.

Why do you hate then so much? They are just another hosting company, I'm sure your can find holes and dirt on all of them? Why not attack an organisation that is "more evil" ?

ryanlol 9y ago

First of all I need to clarify that I'd likely be making these posts even without my personal interactions with Linode, just as I'd advice against using SSL 2.0 or gasp ColdFusion if I saw someone using them. I'm certainly not alone in recommending against Linode, any sane security person will share the sentiment. >Why do you hate then so much? I don't really "hate" Linode, but I certainly don't wish them luck. Why? They wasted a bunch of my time because some guy with a very thick Aussie accent prank called them and the police while introducing himself as me. >Why not attack an organisation that is "more evil" ? I can do both, although I'm hardly "attacking" Linode. I'm simply pointing out their very poor track record, which is an indisputable fact. Why advice folks away from a hosting provider that covers up known breaches for months? https://news.ycombinator.com/item?id=10845985 https://news.ycombinator.com/item?id=10845985 Or one that tells their employees to lie about breaches? https://imgur.com/sJd56AT https://imgur.com/sJd56AT Or one that refused for years to spend a couple of minutes thinking about security, until it started to actually hurt their bottom line? As jsmthrowaway points out, Linode was aware of serious security issues for years and did exactly nothing to protect their customers. https://news.ycombinator.com/item?id=14572970 https://news.ycombinator.com/item?id=14572970

unabst 9y ago
If not for the info you provided I may have wasted my time with them. Honestly, I was wondering if Linode staff or people on "their side" downvoted the post since it didn't seem downvote worthy. It's only fair that their track record follow them, especially their free press. It wasn't a rant or an accusation or anything personal. It was just a list of their past actions and what others had to say about it.
- ryanlol 9y ago
  If you want trustworthy cloud hosting look at EC2 and GCE. Avoid digital ocean, they have a long history of account hijackings due to "social engineering" attacks. Otherwise look at dedicated hosting, preferably colocation but just renting servers can be cheaper and isn't so bad. Encrypt your drives, either disable your IPMI thing completely or ensure that it's only accessible over a VPN by you only and not your host. OVH (and their other brands) might be a decent cheap choice for dedicated hosting that should be very competitive in Linodes price bracket.