Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

$15 Dedicated servers from OVH

ruchirablog.com

Post reply on HN
Print view View original

51–60 of 133 posts

Re: $15 Dedicated servers from OVH

#51

Post by codexon »

wut42 wrote: post #40

I'm french and I've been using low-cost offers from OVH (Kimsufi) or Illiad (Online.net) since a couple of years. I just have ONE objection: If you plan to do something professional with them, just, don't. For them, every client is dispensable (even if you rent 200 servers or more). They won't hesitate a single second to delete your server if they have a small problem with you (for example, getting DDoS'd). OVH have…

How do you order from online.net?

It keeps on saying:

Erreur : Vous ne pouvez accéder à cette page tant que la console est en phase de beta.

Re: $15 Dedicated servers from OVH

#52

Post by [deleted] »

wut42 wrote: post #40

I'm french and I've been using low-cost offers from OVH (Kimsufi) or Illiad (Online.net) since a couple of years. I just have ONE objection: If you plan to do something professional with them, just, don't. For them, every client is dispensable (even if you rent 200 servers or more). They won't hesitate a single second to delete your server if they have a small problem with you (for example, getting DDoS'd). OVH have…

[deleted]

Re: $15 Dedicated servers from OVH

#53

Post by aes256 »

w1ntermute wrote: post #44

I remember reading that OVH is very popular in the Scene[0], for running topsites and the like. The reliability and bandwidth must be pretty good for them to be used by the Scene. 0: http://en.m.wikipedia.org/wiki/Warez_scene

OVH are most certainly not popular with the scene!

That said, OVH is extremely popular with those involved in piracy more broadly, and their servers are used extensively as seedboxes.

Re: $15 Dedicated servers from OVH

#54

Post by w1ntermute »

aes256 wrote: post #53
w1ntermute wrote: post #44

I remember reading that OVH is very popular in the Scene[0], for running topsites and the like. The reliability and bandwidth must be pretty good for them to be used by the Scene. 0: http://en.m.wikipedia.org/wiki/Warez_scene

OVH are most certainly not popular with the scene! That said, OVH is extremely popular with those involved in piracy more broadly, and their servers are used extensively as seedboxes.

My bad, maybe I got the popular seedbox hosts confused with the popular topsite hosts. For some reason, I seem to remember OVH being mentioned in a scene notice. It might've been when they busted a topsite for leaking releases to a seedbox used by a private torrent site uploader.

Re: $15 Dedicated servers from OVH

#55

Post by hosay123 »

tptacek wrote: post #47
maximegarcia wrote: post #39

Earlier quoted context omitted.

This for maintenance reporting. How do the hell they know if one of your HD has died ? It's not mandatory. And the ssh key added enforces the source IP address of requests.

One way would be to publish a HTTP/JSON API for fetching a specific set of stats from a server given an authorization key, provide a reference implementation, and allow customers to build their own if they're not comfortable with that. Root SSH logins don't seem like a particularly good solution for this problem.

Surprised to read this from a security guy.

1) discard time-tested crypto implementation

2) write your own.

3) run it as root so it can read sensors

4) feel safer

Everything aside, most of these colo machines are set to netboot in order to implement their rescue system. Never poked around, but wouldn't be surprised those DHCP requests hit other machines on the segment. OVH seem to be more sensible than most when it comes to network configuration, but I wouldn't be surprised this happens in other places (the difference between a $50 Ethernet switch and a $5000 Ethernet switch right there)

Edit: since some don't seem to understand the basics of security, or perhaps out of an ill-placed sense of loyalty: running a web server + CGI combo as root on an Ethernet segment exposed to other colo customers, in place of a 20 year old service designed for exactly this scenario, when its sole user already has hardware access (and reboot + netboot access) to the machine is fucking stupid. I'm making no argument here, just calling out terrible advice for what it is.

Re: $15 Dedicated servers from OVH

#56

Post by tptacek »

hosay123 wrote: post #55
tptacek wrote: post #47

Earlier quoted context omitted.

One way would be to publish a HTTP/JSON API for fetching a specific set of stats from a server given an authorization key, provide a reference implementation, and allow customers to build their own if they're not comfortable with that. Root SSH logins don't seem like a particularly good solution for this problem.

Surprised to read this from a security guy. 1) discard time-tested crypto implementation 2) write your own. 3) run it as root so it can read sensors 4) feel safer Everything aside, most of these colo machines are set to netboot in order to implement their rescue system. Never poked around, but wouldn't be surprised those DHCP requests hit other machines on the segment. OVH seem to be more sensible than most when it c…

?!

Re: $15 Dedicated servers from OVH

#57

Post by hosay123 »

tptacek wrote: post #56
hosay123 wrote: post #55

Earlier quoted context omitted.

Surprised to read this from a security guy. 1) discard time-tested crypto implementation 2) write your own. 3) run it as root so it can read sensors 4) feel safer Everything aside, most of these colo machines are set to netboot in order to implement their rescue system. Never poked around, but wouldn't be surprised those DHCP requests hit other machines on the segment. OVH seem to be more sensible than most when it c…

?!

Which bit didn't you understand?

Re: $15 Dedicated servers from OVH

#58

Post by tptacek »

hosay123 wrote: post #57
tptacek wrote: post #56

Earlier quoted context omitted.

?!

Which bit didn't you understand?

Every single one of your numbered points.

1) discard REMOTE SHELL solely for OS statistics

2) write your own TINY WEB APPLICATION SERVED BY NGINX/APACHE

3) run it as SOME USER THAT can read STATISTICS DATA

4) BE safer

Re: $15 Dedicated servers from OVH

#59

Post by aes256 »

w1ntermute wrote: post #54
aes256 wrote: post #53

Earlier quoted context omitted.

OVH are most certainly not popular with the scene! That said, OVH is extremely popular with those involved in piracy more broadly, and their servers are used extensively as seedboxes.

My bad, maybe I got the popular seedbox hosts confused with the popular topsite hosts. For some reason, I seem to remember OVH being mentioned in a scene notice. It might've been when they busted a topsite for leaking releases to a seedbox used by a private torrent site uploader.

Yep, if OVH were referred to it would only have been in a negative context, e.g. outing a P2L (Pay to Leech) site or someone seeding files to torrent trackers.

Re: $15 Dedicated servers from OVH

#60

Post by hosay123 »

tptacek wrote: post #58
hosay123 wrote: post #57

Earlier quoted context omitted.

Which bit didn't you understand?

Every single one of your numbered points. 1) discard REMOTE SHELL solely for OS statistics 2) write your own TINY WEB APPLICATION SERVED BY NGINX/APACHE 3) run it as SOME USER THAT can read STATISTICS DATA 4) BE safer

1.

> One way would be to publish a HTTP/JSON API for fetching a specific set of stats from a server

> given an authorization key

2.

> provide a reference implementation, and allow customers to build their own if they're not comfortable with that.

Implies 3: entire point of the implementation is to read sensors, which requires root, or further messing with the security properties of the base system (e.g. sudo), and expecting users to do this correctly.

So basically what you're advocating is to encourage users to run custom HTTP servers as root.

Edit: and I see you edited your comment, and now advocating running nginx as root.

Post reply on HN