4 ms·
It's almost public knowledge as there's an option in the GUI called "scrub data", the absence of a tick there implies that it's not going to be erased before th
by nwh 13y ago
It's almost public knowledge as there's an option in the GUI called "scrub data", the absence of a tick there implies that it's not going to be erased before the VMs partition is reassigned. I had a chat to the support months back about "erase data" not being in the API at the time, and the solution I came to was just to ditch their API and go back to scraping their forms for the option.
That said, this would probably go down better for the company and the community if you tried a private disclosure rather than posting about it on Github.
https://www.digitalocean.com/security https://www.digitalocean.com/security
- 1945 13y agoI've been a DO customer for about a year and some, this is news to me. So no, I wouldn't say it's public knowledge. That said, I haven't really destroyed many of my VMs.
- nwh 13y agohttp://i.imgur.com/Aliyewf.png http://i.imgur.com/Aliyewf.png I suppose when I made that comment I was expecting everybody to be like me; eager to flip switches to see what they do.
- djur 13y agoI would expect that option to do something along the lines of scrubbing the data on the hardware level so that someone who physically examined the disk wouldn't be able to access my data. That's because I'd expect my data to be at least logically wiped in the first place.
- bsaul 13y agoSame here
- mikeash 13y agoThat does not actually state anything that indicates they will just hand over all of your data to the next random stranger.