4 ms·

But shouldn't that be disclosed to Railway, and not the public? If they had someone running a botnet on compromised accounts there, for example. If Railway isn

But shouldn't that be disclosed to Railway, and not the public? If they had someone running a botnet on compromised accounts there, for example. If Railway isn't satisfied with the explanation, they're able to say so publicly, yes?

r_lee 6mo ago
if it wasn't something specific to their setup, it should be disclosed publicly, because this is a catastrophic incident that makes you think it could happen to you as well, and there's no way to know what could trigger it
- ceejayoz 6mo ago
  > if it wasn't something specific to their setup They're a web host; it could be any number of plausible mundane things that triggered automated action. This is a big recurring problem for any shared hosting provider.
  - r_lee 6mo ago
    a huge account like theirs should not be subject to automated actions like that. an entire gcp project deleted along with its persistent disks. how does that make any sense? nobody thought to call them or anything
    - ceejayoz 6mo ago
      > a huge account like theirs should not be subject to automated actions like that. No matter how damaging the behavior? > an entire gcp project deleted along with its persistent disks. Railway doesn't say that - "persistent disks inaccessible", followed by "persistent disks restored to ready state". It was a suspension, not a wipe.
      - r_lee 6mo ago
        yes and yes, inaccessible where they had to be recovered.. there's like 0% chance there was domething super damaging going on where they couldn't get anybody on the phone yet within 10 mins or so were able to get the restoration process going with their account managers I dont see what could be going on where an automated process would have to step in except for something like suddenly provisioning infinite amounts of resources, but quota limits should hit first so...

4 ms·

But shouldn't that be disclosed to Railway, and not the public? If they had someone running a botnet on compromised accounts there, for example. If Railway isn

by ceejayoz 6mo ago

r_lee 6mo ago
if it wasn't something specific to their setup, it should be disclosed publicly, because this is a catastrophic incident that makes you think it could happen to you as well, and there's no way to know what could trigger it
- ceejayoz 6mo ago
  > if it wasn't something specific to their setup They're a web host; it could be any number of plausible mundane things that triggered automated action. This is a big recurring problem for any shared hosting provider.
  - r_lee 6mo ago
    a huge account like theirs should not be subject to automated actions like that. an entire gcp project deleted along with its persistent disks. how does that make any sense? nobody thought to call them or anything
    - ceejayoz 6mo ago
      > a huge account like theirs should not be subject to automated actions like that. No matter how damaging the behavior? > an entire gcp project deleted along with its persistent disks. Railway doesn't say that - "persistent disks inaccessible", followed by "persistent disks restored to ready state". It was a suspension, not a wipe.
      - r_lee 6mo ago
        yes and yes, inaccessible where they had to be recovered.. there's like 0% chance there was domething super damaging going on where they couldn't get anybody on the phone yet within 10 mins or so were able to get the restoration process going with their account managers I dont see what could be going on where an automated process would have to step in except for something like suddenly provisioning infinite amounts of resources, but quota limits should hit first so...