4 ms·

VPS providers should take a little responsibility to protect their customers. I'm not talking about full on sys admin or managed services, but even a scan and

VPS providers should take a little responsibility to protect their customers. I'm not talking about full on sys admin or managed services, but even a scan and report or taking off badly infected hosts offline till the owner upgrades it. This will save them much time in the future, save their own some time, and save other sites (that will be attached through the compromised hosts some time). Being a good citizen of the Internet boils down to taking some level of responsibility. I wont put grandma on the internet without malware bytes or avg, etc on her computer. So why should I give her a VPS and tell her she's on her own?

M41K0 12y ago
OVH is not a VPS Providers. OVH is a global service provider. This hack is on Dedicated Server. OVH do not have the right and the access to the system of thoses servers. By the way, all the clients have been informed Two weeks ago by a global mailling because of Shellshock. The responsability is all on the customer.
- spacefight 12y ago
  "The responsability is all on the customer." That changes quickly if links get saturated suddenly and other customers are impacted.
  - mahouse 12y ago
    Then cut off the network connectivity of the compromised hosts because they have breached the contract.
- BuildTheRobots 12y ago
  > OVH do not have the right and the access to the system of thoses servers. You should check your TOS. They reserve the right to access your server and if you use any of the default install images it comes pre-configured with their SSH key.
stevekemp 12y ago
One of the most command ways a virtual machine is compromised is by brute-forcing a root SSH password. Do you suggest that every hosting company run non-stop dictionary attacks against their clients? Or even nmapping open ports, non-stop, looking for backdoor services? 95% of the time virtual machines are running unmanaged, and the hosting company has no insight into what is running inside the machines, nor how up to date they are.
- tedunangst 12y ago
  The hosting provider is in a much better position to identify scans and other external threats and block them than any individual host is.

M41K0 12y ago

OVH is not a VPS Providers. OVH is a global service provider. This hack is on Dedicated Server. OVH do not have the right and the access to the system of thoses servers. By the way, all the clients have been informed Two weeks ago by a global mailling because of Shellshock. The responsability is all on the customer.

spacefight 12y ago
"The responsability is all on the customer." That changes quickly if links get saturated suddenly and other customers are impacted.
- mahouse 12y ago
  Then cut off the network connectivity of the compromised hosts because they have breached the contract.
BuildTheRobots 12y ago
> OVH do not have the right and the access to the system of thoses servers. You should check your TOS. They reserve the right to access your server and if you use any of the default install images it comes pre-configured with their SSH key.

stevekemp 12y ago

One of the most command ways a virtual machine is compromised is by brute-forcing a root SSH password. Do you suggest that every hosting company run non-stop dictionary attacks against their clients? Or even nmapping open ports, non-stop, looking for backdoor services? 95% of the time virtual machines are running unmanaged, and the hosting company has no insight into what is running inside the machines, nor how up to date they are.

tedunangst 12y ago
The hosting provider is in a much better position to identify scans and other external threats and block them than any individual host is.