3 ms·

>If breaking stuff causes your company to have a terrible reputation for privacy, security, or competency, that might not be survivable. I reckon this stuff is

>If breaking stuff causes your company to have a terrible reputation for privacy, security, or competency, that might not be survivable. I reckon this stuff is particularly survivable. You can be like Linode, fuck up everything over and over again and still do just fine.

osrec 8y ago
Or Facebook...
coldtea 8y ago
>You can be like Linode, fuck up everything over and over again and still do just fine. Source? Because every time I've read about Linode they had glowing user reviews, including on HN...
- detaro 8y ago
  a starting point (surprisingly high result on Google while looking for a list) https://news.ycombinator.com/item?id=10845278 https://news.ycombinator.com/item?id=10845278
- freehunter 8y ago
  It blows my mind that people still give glowing reviews to Linode when in 2013 hackers breached their systems and stole credit card numbers and customers reported their credit cards were being used maliciously and Linode got away with saying "nuh uh": https://www.theregister.co.uk/2013/04/16/linode_breach/ https://www.theregister.co.uk/2013/04/16/linode_breach/ Or again in 2015 when Linode's poor security lead to PagerDuty being hacked: https://www.securityweek.com/how-attackers-likely-bypassed-linodes-two-factor-authentication-hack-pagerduty https://www.securityweek.com/how-attackers-likely-bypassed-l... You can find some more discussion in previous HN threads about it: https://news.ycombinator.com/item?id=11136399 https://news.ycombinator.com/item?id=11136399
- ryanlol 8y ago
  Yeah, others provided good links. I think your comment somewhat proves my point :) Nobody remembers this stuff!
freehunter 8y ago
That's the kind of thing that pisses me off. I'm more than willing to do business with companies who have had security breaches as long as they've learned from the mistake and corrected it. Target had a massive security breach and they overhauled their entire IT security infrastructure and replaced all their POS systems. Good. I still shop at Target occasionally. Home Depot had a breach and their executives said "this was expected, we aim for a C level of security not an A level" and didn't want to spend additional money on security. That's unacceptable to me. Linode had a security breach and said "it's fine, it only impacted a few people and they only lost tens of thousands of dollars" and then they got breached again and said "yeah but it's not our fault that we use an unpatched version of ColdFusion for our admin portal". They never took ownership of their security issues. That's unacceptable to me. Equifax got breached again during their other damn breach investigation and who here remembers that Equifax even made the news? No one. A year later it's a non-event. Unfortunately, most people don't share my beliefs so Linode and Equifax get away with it, and Home Depot's "it's not worth it to invest in security because there's no ROI" is completely true. Unless companies pay a heavy (I'd say existential) penalty for lack of security, nothing will change.
user5994461 8y ago
Linode is a very cheap provider of a mass market product. The bulk of their customers should be cheap customers who either don't know or don't care. Possibly both and with a high turnover.
- deleted 8y ago
  [deleted]

osrec 8y ago

Or Facebook...

coldtea 8y ago

>You can be like Linode, fuck up everything over and over again and still do just fine. Source? Because every time I've read about Linode they had glowing user reviews, including on HN...

detaro 8y ago
a starting point (surprisingly high result on Google while looking for a list) https://news.ycombinator.com/item?id=10845278 https://news.ycombinator.com/item?id=10845278
freehunter 8y ago
It blows my mind that people still give glowing reviews to Linode when in 2013 hackers breached their systems and stole credit card numbers and customers reported their credit cards were being used maliciously and Linode got away with saying "nuh uh": https://www.theregister.co.uk/2013/04/16/linode_breach/ https://www.theregister.co.uk/2013/04/16/linode_breach/ Or again in 2015 when Linode's poor security lead to PagerDuty being hacked: https://www.securityweek.com/how-attackers-likely-bypassed-linodes-two-factor-authentication-hack-pagerduty https://www.securityweek.com/how-attackers-likely-bypassed-l... You can find some more discussion in previous HN threads about it: https://news.ycombinator.com/item?id=11136399 https://news.ycombinator.com/item?id=11136399
ryanlol 8y ago
Yeah, others provided good links. I think your comment somewhat proves my point :) Nobody remembers this stuff!

freehunter 8y ago

That's the kind of thing that pisses me off. I'm more than willing to do business with companies who have had security breaches as long as they've learned from the mistake and corrected it. Target had a massive security breach and they overhauled their entire IT security infrastructure and replaced all their POS systems. Good. I still shop at Target occasionally. Home Depot had a breach and their executives said "this was expected, we aim for a C level of security not an A level" and didn't want to spend additional money on security. That's unacceptable to me. Linode had a security breach and said "it's fine, it only impacted a few people and they only lost tens of thousands of dollars" and then they got breached again and said "yeah but it's not our fault that we use an unpatched version of ColdFusion for our admin portal". They never took ownership of their security issues. That's unacceptable to me. Equifax got breached again during their other damn breach investigation and who here remembers that Equifax even made the news? No one. A year later it's a non-event. Unfortunately, most people don't share my beliefs so Linode and Equifax get away with it, and Home Depot's "it's not worth it to invest in security because there's no ROI" is completely true. Unless companies pay a heavy (I'd say existential) penalty for lack of security, nothing will change.

user5994461 8y ago

Linode is a very cheap provider of a mass market product. The bulk of their customers should be cheap customers who either don't know or don't care. Possibly both and with a high turnover.

deleted 8y ago
[deleted]