Search results

Not true. We tried to evaluate it and the development installation they (MG) provided had issues. We tried to get it resolved but communication dropped off. We would like to be involved, but the logistics of it is not working out.

:mellow:

Partially right. I'll elaborate.  You can audit code all day long, but there are some kinds of vulnerabilities that can be missed during a code audit. I don't believe in merely a code audit. We have a multi-faceted approach. The audit starts off with a check list where we go through an entire...

Given that the frontend to virtualizor runs php as root I wouldn't say virtualizor is that great to begin with. Any commend injection exploit or sqli could grant root access to the node.

It is very important that you update to this release :)

Sounds like a great way to get your entire infrastructure pwnt. Hopefully you guys have done relevant code review to ensure its not full of goatse sized security holes.

I refuse to take cabs there when I fly in. I rent a car, and rental return is literally around the block from the airport.

I have to say in the past 6 months his communication has really stepped up. I haven't really had a single issue. We had a minor outage on B power due to an electrical contractor turning off the POST ups power. It affected one of my racks because the rack level ats is lazy and I run on B primary...

We haven't heard or seen anything. They probably got hacked and don't know how and are making assumptions.

Same parent company - Root Level Tech

And this is why you should at least be a tad bit intelligent and lock this shit down to the point it is not accessible on the internet publicly.

Yes its related to an old hack. http://forum.lxcenter.org/index.php?t=msg&th=19215&goto=102646&#msg_102646 in specific. Its being done via the webcommand.php which also calls those functions.

It appears to be an sql Injection:   They are getting access the admin  user:   They are injecting files using display.php   NOTE: default.php is being injected into 'every' account.

Null 178.248.23.0/24 on your network everyone.

Important to note that the default.php file is owned by root.

There was a very large DDOS attack. They have it all routed through blacklotus right now.

Curious, what model is the TOR cisco?

Redhat Bugzilla https://bugzilla.redhat.com/show_bug.cgi?id=979936

Well I guess this made it here. All started with us trying to break betterlinux, after we discovered a exploit from 2003 caused some odd behavior we had kaniini take a look and he made it a fully reproducible poc.

As you are switching to Virtualizor, are you sure similar security holes do not exist there? It is very important to note that on virtualizor, most of the web facing php runs as ROOT.