4 ms·
There we go. I suspected that Oles was misinforming/lying to the community when he initially denied the existence of a security vulnerability, and I was right:
by mrb 14y ago
There we go. I suspected that Oles was misinforming/lying to the community when he initially denied the existence of a security vulnerability, and I was right: https://news.ycombinator.com/item?id=5627487 https://news.ycombinator.com/item?id=5627487
When you think about it, this whole situation with the hacks of Linode, OVH, etc, is completely insane. Bitcoin has become so successful and valuable, that bitcoins thieves are compromising core Internet infrastructure that so many companies rely on.
People say "use more serious/professional hosters", but OVH is the world's largest server host and is very much a "professional" service. I bet that within 2-3 years we will see more and more stunning hacks of other hosters like Amazon EC2, etc.
- DigitalJack 14y agoThe flip-side is now OVH is more secure than they have been in the past. Nothing like a pot of gold to motivate people to try to break your security. This is probably more effective at exposing weakness than paid pen-testing. Not that you ever want customers to lose money/data/whatever in the process, but it's not all down-side.
- ig1 14y agoIt's not however a high-security host. If you need security you should at least be using a provider that meets the security provisions of PCI, HIPAA, FISMA, etc. If banks and government agencies aren't using it, then it probably doesn't have the security level needed for high-value bitcoin wallets. There's a reason you have specialist data centres that focus on sectors like finance.