4 ms·

Pro-security? Stay away from shared hosting. VPS/VDS are cheap nowadays

DCoder 11y ago
In that case, you will probably need additional budget for a sysadmin to keep it up to date.
dogma1138 11y ago
Depends on whether you consider "privacy" as paramount in your security, in that case VPS's aint that great either. Shared hosting can be more secure than most self configured dedicated hosting options, simply because the hosting providers "cares" about the security in the former while outsourcing the risk to you for the most part in the latter. If say we look at how many times a shared hosting provider was compromised (excluding stolen credentials for individual accounts since it doesn't matter if they steal your credentials for the shared control panel or for the SSH on your dedicated box) i think the picture will be quite different than what you imagine. Big hosting providers rarely get actually compromised, on the other hand self configured dedicated hosting boxes get owned everyday by the truck load, from configuration issues to missing updates to unhardened environments they tend to be much more vulnerable. Shared hosting providers need and do lockdown everything since their adversaries are not only external attackers but also customers with high degree of access. This doesn't just reduces the likelihood of a security issue but also reduces the impact of such issues for example SQL injection on a shared hosting will yield pretty much nothing, yes they'll be able to dump the application tables but that's it, forget about code/command execution that DB is locked down harder than one would think it's possible same thing go for other issues, local file inclusion? well GL, directory traversal, breaking out of the chroot, try agin... Now this ofc doesn't mean that some one can't configure their own box to be just as secure for but for all effective purposes if you are running a small operation like a personal site or a site for you own small business the chances of you being able to effectively managing security at the same level of a solid hosting provider is quite slim.

In that case, you will probably need additional budget for a sysadmin to keep it up to date.

Depends on whether you consider "privacy" as paramount in your security, in that case VPS's aint that great either. Shared hosting can be more secure than most self configured dedicated hosting options, simply because the hosting providers "cares" about the security in the former while outsourcing the risk to you for the most part in the latter. If say we look at how many times a shared hosting provider was compromised (excluding stolen credentials for individual accounts since it doesn't matter if they steal your credentials for the shared control panel or for the SSH on your dedicated box) i think the picture will be quite different than what you imagine. Big hosting providers rarely get actually compromised, on the other hand self configured dedicated hosting boxes get owned everyday by the truck load, from configuration issues to missing updates to unhardened environments they tend to be much more vulnerable. Shared hosting providers need and do lockdown everything since their adversaries are not only external attackers but also customers with high degree of access. This doesn't just reduces the likelihood of a security issue but also reduces the impact of such issues for example SQL injection on a shared hosting will yield pretty much nothing, yes they'll be able to dump the application tables but that's it, forget about code/command execution that DB is locked down harder than one would think it's possible same thing go for other issues, local file inclusion? well GL, directory traversal, breaking out of the chroot, try agin... Now this ofc doesn't mean that some one can't configure their own box to be just as secure for but for all effective purposes if you are running a small operation like a personal site or a site for you own small business the chances of you being able to effectively managing security at the same level of a solid hosting provider is quite slim.