Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Don't trust your business with Linode

twitter.com

Post reply on HN
Print view View original

11–20 of 26 posts

Re: Don't trust your business with Linode

#11

Post by RockRobotRock »

iKlsR wrote: post #10
RockRobotRock wrote: post #4

My friend just got pwned by a malicious itch.io game a few days ago. They didn't reply to my report, but seemed to have taken it down after a couple days.

Later versions of windows 10 and up has a sandbox feature ( https://learn.microsoft.com/en-us/windows/security/threat-pr... ) you can enable to run random exes, also advised you keep a free malware scanner active etc. I resurrected an ancient piece of hardware recently and in the hunt for drivers these were key.

Seems like a great feature! Judging from VirusTotal results, this was nearly undetectable.

Re: Don't trust your business with Linode

#13

Post by no_time »

iKlsR wrote: post #10
RockRobotRock wrote: post #4

My friend just got pwned by a malicious itch.io game a few days ago. They didn't reply to my report, but seemed to have taken it down after a couple days.

Later versions of windows 10 and up has a sandbox feature ( https://learn.microsoft.com/en-us/windows/security/threat-pr... ) you can enable to run random exes, also advised you keep a free malware scanner active etc. I resurrected an ancient piece of hardware recently and in the hunt for drivers these were key.

Last time I checked it didn't have gpu acceleration or it was so buggy that games just crashed regardless.

Re: Don't trust your business with Linode

#14

Post by tluyben2 »

metadat wrote: post #9
Grimburger wrote: post #8

Earlier quoted context omitted.

> That's a lot of work to do right. Compared to? Backups are something you should have regardless, an account with other providers and means to spin up some nodes is just basic common sense. Vote with your wallet, let the execs know and never come back, it's honestly that simple.

Agreed. It's easy to get a false sense of security with s3 / object storage being so reliable. Always better to have an escape hatch and corresponding protocols in place.

Every business I work(ed) with found out that at least backups (on cd, dvd, tape and s3) for some systems were useless when trying to restore them. Sometimes they had been storing useless backups for many years before finding out they were done wrong at the worst possible time.

Nothing to do with the medium, just when you have 100-1000s of systems which are backed up, some of these systems 10+ years old, testing the backups is simply not done in reality.

Re: Don't trust your business with Linode

#15

Post by quickthrower2 »

tluyben2 wrote: post #14
metadat wrote: post #9

Earlier quoted context omitted.

Agreed. It's easy to get a false sense of security with s3 / object storage being so reliable. Always better to have an escape hatch and corresponding protocols in place.

Every business I work(ed) with found out that at least backups (on cd, dvd, tape and s3) for some systems were useless when trying to restore them. Sometimes they had been storing useless backups for many years before finding out they were done wrong at the worst possible time. Nothing to do with the medium, just when you have 100-1000s of systems which are backed up, some of these systems 10+ years old, testing the…

Testing restoring regularly is part of the deal of saying “i have a backup!”

A good thing is all these viral security requirements slithering through the software supply chain (and backup is a part of security because ransomware) will force anyone who sells SaaS to consider it after the startup stages when they sell to enterprises.

Re: Don't trust your business with Linode

#16

Post by type0 »

metadat wrote: post #3
waydegg wrote: post #2

Has anyone else had issues with Linode before? While this specific situation sucks, I feel like I’ve seen much more headache with AWS/GCP/Azure regarding people getting completely locked out of stuff.

It's always a risk when you're leasing computer resources from a 3rd party. At least if you own the hardware, you won't lose your data (except in extreme cases where the government takes it, but if this is the case you're screwed and data / service loss is the least of your worries).

> At least if you own the hardware, you won't lose your data (except in extreme cases where the government takes it

For colocation you probably won't loose the data but the company you chose can still disconnect you. And it's not uncommon in certain countries that police will take the whole rack belonging to different customers when they do police raids against pirating, mainly because they're incompetent but also trying to find other violators.

Re: Don't trust your business with Linode

#17

Post by tluyben2 »

quickthrower2 wrote: post #15
tluyben2 wrote: post #14

Earlier quoted context omitted.

Every business I work(ed) with found out that at least backups (on cd, dvd, tape and s3) for some systems were useless when trying to restore them. Sometimes they had been storing useless backups for many years before finding out they were done wrong at the worst possible time. Nothing to do with the medium, just when you have 100-1000s of systems which are backed up, some of these systems 10+ years old, testing the…

Testing restoring regularly is part of the deal of saying “i have a backup!” A good thing is all these viral security requirements slithering through the software supply chain (and backup is a part of security because ransomware) will force anyone who sells SaaS to consider it after the startup stages when they sell to enterprises.

Yes, I know, but even in banking (pci/iso cert) I saw faulty backups, and not incidentally.

Re: Don't trust your business with Linode

#18

Post by account42 »

waydegg wrote: post #2

Has anyone else had issues with Linode before? While this specific situation sucks, I feel like I’ve seen much more headache with AWS/GCP/Azure regarding people getting completely locked out of stuff.

I have had two reports from/via Netcraft(for the exact same file) that resulted in Linode threatening to take down my small VPS within 24 hours. But while I don't think such a short time for response is reasonable without any actual non-bs evidence in both times they backed down after I explained to them that there was nothing wrong. Was long before the Akamai acquisition though so who knows if their procedure changed.

Re: Don't trust your business with Linode

#19

Post by ashwagary »

derkades wrote: post #12

This is why I like hosting providers that totally ignore reports/DMCA. Even if you're not doing anything illegal, it's good to know your server won't get taken down randomly because of a false report.

What are some hosting providers that fit this criteria?

Re: Don't trust your business with Linode

#20

Post by LinuxBender »

My personal preference rather than picking X over Y VPS provider is to spread my nodes out across several of them. This would especially be the case if I were running a revenue generating business. Providers have unplanned outages. Support teams of an individual provider can get overwhelmed and take lazy actions like those in this tweet.

By having applications and data distributed over multiple providers automation can change DNS when a provider is having issues even if said issues are self inflicted such as a lazy over-reaction to an abuse report. It may not be feasible for a company to have all their data replicated on all providers. This is probably OK. N+1 for hard to replicate data may be sufficient to have a degraded service rather than a full site down critical outage.

Another benefit to having multiple providers is letting them know the better they treat you, the more significant weight your automation will give to spinning up nodes there. Make them compete for your money.

Post reply on HN