3 ms·
Their security has been compromised on at least one occasion due to the platform they've built their service on (SolusVM). Around two years ago a SolusVM zero
by Veratyr 12y ago
Their security has been compromised on at least one occasion due to the platform they've built their service on (SolusVM).
Around two years ago a SolusVM zero day allowed attackers to:
- Partially or fully wipe most VPS, many of which could not be recovered
- Gain access to the database, including plaintext root VPS passwords, first name, last name, email
Not saying DigitalOcean is a fortress or anything but it hasn't been compromised on anything like this kind of scale.
Sources:
- http://blogs.ixiacom.com/ixia-blog/the-speed-of-a-zero-day-solusvm-sql-injection-attack/ http://blogs.ixiacom.com/ixia-blog/the-speed-of-a-zero-day-s...
- https://clientarea.ramnode.com/announcements.php?id=183 https://clientarea.ramnode.com/announcements.php?id=183
- ramnode 12y agoThat was indeed two years ago, with no further issues since. It was not most VPSs, though there were a few host nodes wiped. Regardless, we are in the process of fully replacing SolusVM with our own system.