SSD belonging to Euro-cloud Scaleway was stolen,then turned up on YouTube

> Lechelle said Scaleway worked with the YouTuber to recover the disk. The French-language video creator has written to Scaleway with assurances they have not copied the information contained on the disk. It is said some customer data was on the drive, unencrypted, including the source code and SSH keys of an Italian VPS provider.

Re: SSD belonging to Euro-cloud Scaleway was stolen,then turned up on YouTube

#5

Post by hdjjhhvvhga » Wed, Jul 28, 2021, 12:55 PM UTC

fulafel wrote: post #2

So was there cleartext data on it?

Yes, the article clearly says the data was unencrypted.

Re: SSD belonging to Euro-cloud Scaleway was stolen,then turned up on YouTube

#6

Post by terom » Wed, Jul 28, 2021, 1:02 PM UTC

terom wrote: post #4

Apparently with plaintext customer data. > Lechelle said Scaleway worked with the YouTuber to recover the disk. The French-language video creator has written to Scaleway with assurances they have not copied the information contained on the disk. It is said some customer data was on the drive, unencrypted, including the source code and SSH keys of an Italian VPS provider.

Based on links in the other hackernews thread, it was quick-formatted, but a filesystem containing qemu disk images was recovered: [1]

The YouTube video is in French without English CC subtitles, but there's screenshots of exploring what I assume would be one of the qcow images: [2]

* 03:59 `/root/.ssh` with SSH id_rsa (private) keys, (public) authorized_keys and (hashed) known_hosts

* 07:14 server binaries

* 08:42 server logs

* 12:59 AWS/S3 secret access keys

* 13:33 Source code... in QBASIC ?! must be very valuable legacy code :D

* 17:30 brute-forcing the ssh known_hosts

* etc

[1] https://mobile.twitter.com/Micode/status/1395640486715662336

[2] https://www.youtube.com/watch?v=xf_cKTlOYLo

Re: SSD belonging to Euro-cloud Scaleway was stolen,then turned up on YouTube

#7

Post by mot2ba » Wed, Jul 28, 2021, 1:05 PM UTC

detaro wrote: post #3

2 days ago: https://news.ycombinator.com/item?id=27957471

I posted that thread and I don't know why it was penalty by mod, completely out of front page HN.

Re: SSD belonging to Euro-cloud Scaleway was stolen,then turned up on YouTube

#8

Post by jnwatson » Wed, Jul 28, 2021, 1:07 PM UTC

Why in the world do they ship unencrypted drives around?

Drive encryption is pretty standard these days, isn't it?

Re: SSD belonging to Euro-cloud Scaleway was stolen,then turned up on YouTube

#9

Post by atonse » Wed, Jul 28, 2021, 1:11 PM UTC

jnwatson wrote: post #8

Why in the world do they ship unencrypted drives around? Drive encryption is pretty standard these days, isn't it?

With the big cloud provides its a trivial checkbox.

Can anyone speak to the effort in doing it at the OS level?

Re: SSD belonging to Euro-cloud Scaleway was stolen,then turned up on YouTube

#10

Post by tpxl » Wed, Jul 28, 2021, 1:20 PM UTC

atonse wrote: post #9

jnwatson wrote: post #8

Why in the world do they ship unencrypted drives around? Drive encryption is pretty standard these days, isn't it?

With the big cloud provides its a trivial checkbox. Can anyone speak to the effort in doing it at the OS level?

There's a checkbox to encrypt the disks when installing some linux distros.