Live data from Hacker News

"DigitalOcean Killed Our Company"

twitter.com

201–210 of 620 posts

Re: "DigitalOcean Killed Our Company"

#201
post #169
post #35

Earlier quoted context omitted.

Any that suspects fraud and doesn't want to be on the hook for the inevitable chargeback.

Caps or quotas are a better way to achieve this IMO. Random shutdowns do not make it sound as if DO is ready for production.

It's not just the volume of usage that can indicates fraud, but the pattern. In addition, relying on quotas creates a system that is easily games by perpetrators of fraud.

Caps or quotas are not sufficient to deal with this problem.

Re: "DigitalOcean Killed Our Company"

#202

Who is good about not locking accounts or taking similar actions? Apple and Google are both notorious for blocking things for no reason, is AWS or Azure any better?

I've only had one instance where Linode contacted me about suspicious activity. I responded promptly, it was obvious they understood my answer, and nothing came of it. Another comment thread on this story has people saying Linode's support is better.

Re: "DigitalOcean Killed Our Company"

#203
This is very sad, and why we all need to make the Web decentralized and own our own data. Here, several Fortune 500 companies were relying on a two person team, which itself was relying on a hosting provider with full discretion to shut it all down. What could possibly go wrong?

https://qbix.com/platform is one of many projects working to tackle this. Tim Berners-Lee’s SOLID project and others are, also.

Re: "DigitalOcean Killed Our Company"

#204

Soooo... an automated script flagged them. they get themselves unflagged, and proceed to do the same thing immediately. without any real confirmation that they wouldn't be flagged again. They've basically been flagged as abusing the system multiple times, and they're surprised they had to kick up a storm to get themselves reactivated again? Not to mention, that process they need to run every couple of months, that ta…

My interpretation of that was that the batch job takes 1s per row or something like that rather than 1s total. It obviously wouldn't make sense to spin up 10 nodes to turn a 1s job into 10 0.1s jobs.

Just a guess.

Re: "DigitalOcean Killed Our Company"

#205
post #181

I think, going forward, a data backup is not going to be enough. You’ll need a full devops plan b/c where you just redeploy to another hosting provider. Even better: run your infrastructure across multiple hosting providers with something like consul. DO might cause slower service but not a death sentence.

A corollary is keep your infrastructure simple, and know how it works, so you can stand it up anywhere. Web server/db/memcached can run anywhere easily and is enough for almost every company out there. Are you sure you need {cool new service}? Are you really really sure? Your database can probably do it.

Re: "DigitalOcean Killed Our Company"

#206

Earlier quoted context omitted.

If you get DDOS'd they will stick your VMs in a black hole until the traffic stops to protect their network, no matter how much you plead with them. Good practice, actually, but it's something people usually get frustrated with and they're literally famous for doing it.

That's not true, OVH is one of the few ISPs with an actual free DDoS protection.

Far from flawless. They did it to me and it was dropping half of DNS requests I was receiving so my websites were down. And you practically have to beg them to take you out of DDoS protection.

Re: "DigitalOcean Killed Our Company"

#207
post #196

Some people on HN hate Linode because of their past security screwups (which is valid), but having used both DO and Linode quite a lot, the support on Linode is way, way, way better than DO's. DO's tier 1 support is almost useless. I set up a new account with them recently for a droplet that needed to be well separated from the rest of my infrastructure, and ran into a confusing error message that was preventing it f…

I've been on Linode for 8+ years now (moved there from Slicehost when Rackspace swallowed them up) and their service (not necessarily customer support) has significantly degraded. Not sure I blame them though. They've become far more popular since I started with them and are probably doing their best to grow... but I no longer recommend them as I used to. Just my experience though.

That's how I feel about Scaleway. Scaling customer service is no easy task especially technical companies that require agents to have some understanding of the product.

Re: "DigitalOcean Killed Our Company"

#209

Some people on HN hate Linode because of their past security screwups (which is valid), but having used both DO and Linode quite a lot, the support on Linode is way, way, way better than DO's. DO's tier 1 support is almost useless. I set up a new account with them recently for a droplet that needed to be well separated from the rest of my infrastructure, and ran into a confusing error message that was preventing it f…

Long-time Linode customer here. What were the security screwups? I tried a couple searches but didn't turn up anything.

The two major ones were:

A Bitcoin theft via the Linode Manager interface in 2012: https://news.ycombinator.com/item?id=3654110

and a second Linode Manager compromise in 2016: https://news.ycombinator.com/item?id=10845170

In both cases, if you dig into the context a bit, the story turned out that Linode wasn't fully disclosing the breaches to their customers until they were forced to do so when the news about them reached a certain volume. They also may have been -- almost certainly were -- dishonest about the extent of the damage and how it may have impacted their other customers.

At the time, their Manager interface was a ColdFusion application, which tends to be a big pile of bad juju. They started writing a new one from scratch after, I think, the second compromise.

The really bad thing here is that they got soundly spanked for being less than truthful the first time, and then four years later -- when they'd had ample time to learn from that mistake -- they did it again.

So there's a nonzero chance at any given time that Linode's infrastructure has been compromised and they know it and have decided not to tell you about it.

That's what prompted me to start exploring DigitalOcean more. Unfortunately, I've found that there's a far greater chance that I'll experience actual trouble exacerbated by poor support than that I'll be impacted by an upstream breach, so about half my stuff still lives on in Linode.

Re: "DigitalOcean Killed Our Company"

#210
post #135

Some people on HN hate Linode because of their past security screwups (which is valid), but having used both DO and Linode quite a lot, the support on Linode is way, way, way better than DO's. DO's tier 1 support is almost useless. I set up a new account with them recently for a droplet that needed to be well separated from the rest of my infrastructure, and ran into a confusing error message that was preventing it f…

I have interviewed with DO and they tried diverting me towards a support position. They told me that on a single day a support engineer was supposed to help/advice customers on pretty much whatever the customer was having issue with and also handle something between 80-120 tickets per day. It's nice to see that DO is willing to help on pretty much anything they (read: their team) has knowledge about, but with 80-120…

This is appalling. I worked as a L1 ticket tech for an old LAMP host back in the day where probably half of the tickets required nothing more than a password reset or a IP removal from our firewall, very easy stuff, and was proud if I got over 60 responses out in a 8 hour shift. And that time was spent mostly just typing a response to the customer. I really expected higher standards out of DO.
Post reply on HN