Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Linode’s 13th Birthday

blog.linode.com

Post reply on HN
Print view View original

11–20 of 73 posts

Re: Linode’s 13th Birthday

#11

Post by kjax »

mgkimsal wrote: post #4
ghurtado wrote: post #3

Earlier quoted context omitted.

[EDIT] I misunderstood the security issues parent was referring to

they've had issues with security around their own systems (payment info leaked, IIRC). And if their systems are compromised, because they have the ability to touch my systems (root password reset, for example), there's a potential breach there. and they had their own massive DDOS attack which went on for days last winter (dec 2015?)

Their DDOS was so bad that we had to migrate all of our servers from Linode to Google, which wasn't particularly fun during the weeks of intermittent connectivity. I think it was on the order of weeks, rather than days.

Re: Linode’s 13th Birthday

#12

Post by tiffanyh »

Vultr.com seems to be the new guys coming after Linode.

Does any [Linode users] have any experience with them?

For a company so new they have a surprisingly amount of more features than Linode (eg BSD support, more data centers, dedicated instances, etc)

Note: I'm no way affiliated with either company.

Edit: adding clarity and intent. My edit is in brackets. I'm no shill :)

Re: Linode’s 13th Birthday

#14

Post by andyana »

tiffanyh wrote: post #12

Vultr.com seems to be the new guys coming after Linode. Does any [Linode users] have any experience with them? For a company so new they have a surprisingly amount of more features than Linode (eg BSD support, more data centers, dedicated instances, etc) Note: I'm no way affiliated with either company. Edit: adding clarity and intent. My edit is in brackets. I'm no shill :)

I've used them for about half a dozen instances. No problems at all, and they have very responsive support.

Re: Linode’s 13th Birthday

#15

Post by desireco42 »

Sir_Cmpwn wrote: post #8

[Disclaimer: Linode dev here] I see a few people^W^Weveryone here talking about security. If you didn't read the whole blog post, you might not have noticed the new Linode manager that we're working on being mentioned. Check it out, it's open source: https://github.com/Linode/manager If you haven't been present in other discussions about Linode security, one of the major factors (in my opinion) is the current manager…

:) I probably wouldn't know what to do with more then one or two hosts, but I am envious to know you can have as many as you want (within reason, I am sure)

Also... ColdFusion! Awesome.

Re: Linode’s 13th Birthday

#16

Post by fweespeech »

Sir_Cmpwn wrote: post #8

[Disclaimer: Linode dev here] I see a few people^W^Weveryone here talking about security. If you didn't read the whole blog post, you might not have noticed the new Linode manager that we're working on being mentioned. Check it out, it's open source: https://github.com/Linode/manager If you haven't been present in other discussions about Linode security, one of the major factors (in my opinion) is the current manager…

> I see a few people^W^Weveryone here talking about security. If you didn't read the whole blog post, you might not have noticed the new Linode manager that we're working on being mentioned. Check it out, it's open source: https://github.com/Linode/manager

Open sourcing the UI while keeping the actual portion that manipulates the data + handles authentication ( the API ) doesn't have substantial security benefits since its largely available to the end user already.

While I am sure you are correct that the rewrite in Python is easier to reason about and more secure, I feel the way you've presented it might imply it is secure because the source is available which is not the case.

Re: Linode’s 13th Birthday

#17

Post by Scarbutt »

msbarnett wrote: post #2

I'm gun-shy of Linode's many security issues, but hopefully this further drives down RAM prices of competitors. I'd love a $10 2G DigitalOcean instance.

Although I prefer and use Linode over DO, I don't think DO has much of an option than just match or better Linode's price. Its a race to the bottom.

Re: Linode’s 13th Birthday

#18

Post by pan69 »

Congrats Linode. I have been a customer for many years.

Why could there not be a $5 1 GB plan? I have quite a few instances for which I don't need even 1 GB, let alone 2.

Doubling the RAM is great but what about storage? Why is RAM and storage still coupled? It's a pay for what you don't use system, having to upgrade to a 24 GB, 8 core box just to get some decent drive space. Ridiculous.

I have been with Linode for many years now but it's lack for even some basic modularity will see me leave to AWS soon.

Re: Linode’s 13th Birthday

#19

Post by row1an »

tiffanyh wrote: post #12

Vultr.com seems to be the new guys coming after Linode. Does any [Linode users] have any experience with them? For a company so new they have a surprisingly amount of more features than Linode (eg BSD support, more data centers, dedicated instances, etc) Note: I'm no way affiliated with either company. Edit: adding clarity and intent. My edit is in brackets. I'm no shill :)

Vultr's creators (Choopa) have been in the hosting business for nearly 20 years, so not all that surprising actually.

Re: Linode’s 13th Birthday

#20

Post by Sir_Cmpwn »

fweespeech wrote: post #16
Sir_Cmpwn wrote: post #8

[Disclaimer: Linode dev here] I see a few people^W^Weveryone here talking about security. If you didn't read the whole blog post, you might not have noticed the new Linode manager that we're working on being mentioned. Check it out, it's open source: https://github.com/Linode/manager If you haven't been present in other discussions about Linode security, one of the major factors (in my opinion) is the current manager…

> I see a few people^W^Weveryone here talking about security. If you didn't read the whole blog post, you might not have noticed the new Linode manager that we're working on being mentioned. Check it out, it's open source: https://github.com/Linode/manager Open sourcing the UI while keeping the actual portion that manipulates the data + handles authentication ( the API ) doesn't have substantial security benefits sin…

I don't think I'm implying that by making the manager open source we are making it more secure. The place where security gains come into play is things like the new design of a stateless API talking to a static frontend app, which I think is a much less fragile system in terms of security.

And yeah, the Python API is much easier to reason about security-wise in general.

Post reply on HN