Search results

Learning about security concerns and how to fix them yourself is a lot more rewarding than having someone do it for you.

I would certainly hope he is not the sole developer on that project after reading this code. It doesn't matter if it's 'internal', it's really basic security practices.

It's alarming how lightly you take the security concerns. I don't see anyone taking this project seriously in that case.

https://github.com/KuJoe/KToYS/blob/master/functions.php#L95 https://github.com/KuJoe/KToYS/blob/master/admin.php#L54

This. I found a SQL injection nearly instantly.

Happy birthday, you old bastard! Fran will understand. Franties. (old inside joke)

Yes, they need to setup the initial ssh keys, hostname, etc somehow.

Debian and Ubuntu packages are signed. It's not as if your provider can force an update into your machine. You seem to also be forgetting the fact that your provider has 100% access to your VM's memory, filesystem, etc..

I was already not impressed with his mock-ass Ruby web demos with no application logic, then I saw https://www.virtkick.io/become-a-sponsor.html and tried out the 'core' he plans on ripping. He plans on using https://github.com/retspen/webvirtmgr as a 'core'...

:popcorn: That says a lot about how you run your ship.

Yes, he released a few trial VM's a week ago.

Quite unprofessional. There was a splash page with a countdown, but he removed it and put 'Coming soon!'. I'm also quite confused why he is using EUR, he is an american based company. Edit: The banner has been up since before July 26th. He has been saying 'soon' and 'too busy' for quite some time.

What is not easy about VirtualBox networking? It's really straight forward. VBoxHeadless is actually pretty nice, but I'm not sure it's really designed for large deployments on a single node. Though I've not looked much into it.

Oktay K.

AWS Route 53

 by @Nikki - 3 VOTES

The problem is they really did copy DO's web design. It's basically identical with a bit of changes. If it had come with a unique design and no security issues, I believe it would have had much more luck and not be called a 'DO clone'.

That sounds very poorly designed. It would help to reply to the tickets (even with a canned response) explaining the issue rather than just closing the ticket. It does not sit well with me any many others. I should not have to read vpsBoard to find this out.

I woke up to see the VM removed, and my security issue ticket closed without a response. I don't think I can business with a company that just sweeps it under the rug.

I decided to try them out and am shocked. I signed up for an account and logged in and was greeted with: That is not my virtual machine, nor is that my closed ticket. The billing information page also shows a part of the person's VISA number. I had a friend sign up and he got 2 different...