Indeed
Yeah, if you didn't find it before. What says you will now?
To be completely honest, what we will do is after they are certified, we will completely reinstall our master. I know it sounds crazy but this is called paranoia.
That was something else that stuck out at me. I've never heard of an auditor issuing "certifications" and I'd consider it suspicious if they did. They look for problems, identify what they spot, and make general recommendations about good practices to follow. Software is too complex for auditing to certify that any sizeable program is guaranteed to be free of problems. That said, if Solus releases the audit report, that could help convince people about the current state of the program. I wouldn't hold it against them if they don't release it though. They may actually not be allowed to (depending on the audit contract).
Yes, this talk of certifications seems odd to me, too. I have never heard of an auditor certifying code to be bug-free. That just seems like a bad business move on the part of the auditor, too.
Personally, I consider this the best move, and would very much recommend other providers to do the same (after backing up the database, obviously). There's been quite a bit of root-level-compromise nastiness going around... fair chance that some of the masters have been messed around with in a more severe manner.
Not worth it. You'll need a complete code rewrite.
I think they are praying someone will do it. But honestly would you buy that source?
iNet Interactive would do well to purchase this. Any major provider/datacenter could benefit and shake up the market by buying SolusLabs. cPanel could tender an offer.
