*Curtis G and I
ChicagoVPS / CVPS Hacked. New SolusVM exploit? (Content Restored) [PT. 1/2]
- Thread starter Magiobiwan
- Start date
-
- Tags
- chicagovps cvps exploit solusvm
- Status
drmike
100% Tier-1 Gogent
texteditor
Premium Buffalo-based Hosting
Grammar is for the sheeple in meatspace
Seriously you two. What are you getting out of this? Lulz? It's not helping the community any. Providers are locking down their stuff, unwilling to risk being compromised, which inconveniences their clients. The node wiping is causing people to lose their data, their time, the effort they've put in to setting stuff up, in some cases money and their own clients, and possibly their livelihoods. If you want to HELP the community (foreign idea, I know), let SolusVM and WHMCS know of the exploits BEFORE releasing them. Once you've informed the companies about the exploits and they've had a reasonable amount of time to respond, THEN you can release the code. Back to what YOU'RE getting out of this. Nothing really. Public hatred towards you. Potential legal action taken against you (civil and/or criminal), with potential jail time and/or monetary fines. You're ruining your future with this. So STOP. I'm sure the rest of the community agrees on this point. It's not helping ANYONE, just hurting. So don't do it any longer.
I think they did that ?
However, those companies are more interested by PR and spinning the things around instead of the quality of the code.
We have plenty of evidence about that, at least from Solus, I tend to believe them when they say they sent the exploits not only to the companies, but also to infinity and others.
From where I stand, they are doing a good thing, destroying company credibility means they will have to get it back by releasing a decent product for a change.
Everyone will benefit in the end, exploits will no longer stay hidden to be used only by criminals, the fixes will be forced out of the culprits, people will be more aware of security and will take more back-ups as well as not disclosing personal data, everyone will win.
Even solus will have a better product which will generate better sales if they are really thinking about changing their ways, fire a few PR spin doctors and hire better coders. After all, they are not a political party, just a company which has to deliver a product.
Last edited by a moderator:
@peterw yeah, I imagine it is. Imagine how exciting it will be when you will have to pay $30 for the lowest end VPS and close to a $100 to get something decent, like it was just a few short years ago. Then you'll miss this "crappy monoculture" that you like so much to laugh at!
peterw
New Member
I am pissed off. Someone is trying to destroy the whole SolusVM based economy. I am seeing it but I can't believe it. If the Hostbill and WHMCS 0day exploits are true it is just the beginning.
How should providers work if they can't use SolusVM and WHMCS?
I am using this monoculture too. Nothing to laugh at!
@peterw As long as providers take steps to secure them, they will be fine. There are plenty of simple solutions to prevent SQL injections and such, and on top of that providers can use CloudFlare as a reverse proxy (it's running Nginx as well). So no, the entire industry won't come crashing down.
drmike
100% Tier-1 Gogent
I won't ask where and node you are on. But like the last hack and fail at CVPS, they lost customer VPSes.
. These nodes are LA18, ATL1, ATL4, ATL5.
As an end user you likely have clue which server you are on or want to waste an hour trying to figure that out.
I'd send them a ticket and ask if they lost your VPS or not.
How long have you been down for?
I'd imagine they're still quite busy and they're likely working on getting everyone back up.
What node or location were you in, out of curiosity?
From their reports, the lost data on [SIZE=small]LA18, ATL1, ATL4 and ATL5[/SIZE] is gone ... irrecoverable. If your No. 1 and No. 4 VPS are on any of these .. they're a goner.
But the chicago locations weren't mentioned, so i'm guessing the backup exists for them.
Mine is still down at the moment as well ... BUF19
Last edited by a moderator:
Amitz
New Member
I still do not understand why people who have "important" data on a VPS do not keep own backups. Really. I even have backups of the most unimportant data. If one of my VPS providers goes down, it will take me a max. of 5 hours to be fully operational at another place. And I am just a "hobbyist"... Shame on all "professionals" for not having backups.
Last edited by a moderator:
peterw
New Member
Your customers do not have backups? You do not have backups of services you offer?
My estimation for cvps "next week". Go to another provider, untar your backups and point the domains to the new ip. 4 hours of work and everthing is fine.
No they did not and if they did then you have made promises you cannot keep that is your fault and your responsibility alone, you are no more important than any other customer of CVPS, it will be done when it is done, I have no doubt they are working hard to bring things up opening tickets and updating forums is only distracting them.
- Status