5 ms·

Welp, it looks like it's time to move to Amazon EC2. It's cheaper and hasn't (to my knowledge) been hacked yet.

kbar13 13y ago
irrelevant argument at best
flebron 13y ago
It's probably false that "there does not exist a customer of EC2 that has been hacked", and that should be pretty obvious. Furthermore it's false for essentially all nontrivial, large services.
- bluetooth 13y ago
  But here, it's not a customer that was hacked. It was linode that was hacked, and used to access a specific customer's data.
  - smartwater 13y ago
    "We have been advised that law enforcement officials are aware of the intrusion into this customer’s systems." sounds like a customer was hacked, not Linode.
    - JshWright 13y ago
      Then why was my password reset?
      - mintplant 13y ago
        > Out of an abundance of caution, however, we have decided to implement a Linode Manager password reset. In so doing, we have immediately expired all current passwords. In other words, better safe than sorry.
        JshWright 13y ago
        If the compromise was a brute force, then there's no need to reset my password. If the compromise was due to a flaw in Linode's system (potentially exposing other accounts) then a global password reset makes sense. Can you imagine if every service you used reset everyones passwords every time one of their users got brute forced? You'd do nothing but reset your passwords all day...
    - bluetooth 13y ago
      If a customer was hacked, why reset everyone's password? Unless there is something Linode is not telling us, there is no reason they should be doing this. Think about it like this: what if Google reset everyone's passwords whenever a gmail account got compromised? Ridiculous.
  - flebron 13y ago
    [citation needed]
regecks 13y ago
Can you elaborate on why you think it is cheaper? It's always appeared to me that you pay a hefty premium for compute resources on AWS (at least compared to Linode).
- deleted 13y ago
  [deleted]
whalesalad 13y ago
Not sure why HN is full of so many fair-weather friends these days. Then again your account is only a few days old. I don't wanna sound like an old geezer telling you to get off my lawn, but you should really read the guidelines for posting on HN. For the sake of genuine discussion and just better social behavior in general. Could you say this out loud to a bunch of other hackers with a straight face?
- bluetooth 13y ago
  What did I say wrong? I'm just stating my plans after hearing about another security blunder on Linode's part. Did what I say come off as sarcastic?
rdl 13y ago
Amazon AWS does have much better security for their control panel/admin stuff than most random VPS providers. Linode is particularly bad as VPSes go.

irrelevant argument at best

It's probably false that "there does not exist a customer of EC2 that has been hacked", and that should be pretty obvious. Furthermore it's false for essentially all nontrivial, large services.

bluetooth 13y ago
But here, it's not a customer that was hacked. It was linode that was hacked, and used to access a specific customer's data.
- smartwater 13y ago
  "We have been advised that law enforcement officials are aware of the intrusion into this customer’s systems." sounds like a customer was hacked, not Linode.
  - JshWright 13y ago
    Then why was my password reset?
    - mintplant 13y ago
      > Out of an abundance of caution, however, we have decided to implement a Linode Manager password reset. In so doing, we have immediately expired all current passwords. In other words, better safe than sorry.
      - JshWright 13y ago
        If the compromise was a brute force, then there's no need to reset my password. If the compromise was due to a flaw in Linode's system (potentially exposing other accounts) then a global password reset makes sense. Can you imagine if every service you used reset everyones passwords every time one of their users got brute forced? You'd do nothing but reset your passwords all day...
  - bluetooth 13y ago
    If a customer was hacked, why reset everyone's password? Unless there is something Linode is not telling us, there is no reason they should be doing this. Think about it like this: what if Google reset everyone's passwords whenever a gmail account got compromised? Ridiculous.
- flebron 13y ago
  [citation needed]

regecks 13y ago

Can you elaborate on why you think it is cheaper? It's always appeared to me that you pay a hefty premium for compute resources on AWS (at least compared to Linode).

deleted 13y ago
[deleted]

whalesalad 13y ago

Not sure why HN is full of so many fair-weather friends these days. Then again your account is only a few days old. I don't wanna sound like an old geezer telling you to get off my lawn, but you should really read the guidelines for posting on HN. For the sake of genuine discussion and just better social behavior in general. Could you say this out loud to a bunch of other hackers with a straight face?

bluetooth 13y ago
What did I say wrong? I'm just stating my plans after hearing about another security blunder on Linode's part. Did what I say come off as sarcastic?

rdl 13y ago

Amazon AWS does have much better security for their control panel/admin stuff than most random VPS providers. Linode is particularly bad as VPSes go.