From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1IYrVa-0005xa-35 for garchives@archives.gentoo.org; Fri, 21 Sep 2007 23:02:02 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.14.1/8.14.0) with SMTP id l8LMpdMP008614; Fri, 21 Sep 2007 22:51:39 GMT Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.190]) by robin.gentoo.org (8.14.1/8.14.0) with ESMTP id l8LMelWv025234 for ; Fri, 21 Sep 2007 22:40:47 GMT Received: by nf-out-0910.google.com with SMTP id f5so866673nfh for ; Fri, 21 Sep 2007 15:40:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=gcHQRsPLYZgXcI/9/KmoClPBA4tkOxN+evqF3+VRK54=; b=dwpx6fGASCZx2CGv3haJW4pJsKYXyRO4QlD7zt4/6XLlwj1hZOlDq7V/86w+wb2sL9m7TLycgylLqSYkp0yPcSDeK5k0zd4Y6w/NTUIwwIUHwft7PMXnxti577fsGERAIzlVURKigi755c06Eon/ogf7616hqvozp61NHxZpDPs= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=sLrqB2Jk9NyQxoMhonSsFf1JAWdM4DVN2s9Pz8kKGvw4dTppIPo6nmZjMgRd3CaMQNDomQZefwHF8/Hp/b2hoWDwwokbYfwA1FRCWdKJHlfhbu6De4lAPf540tqHQTWud2j1263dkX1ruuVe5vzt7kRSWjLUIIYI2Z1IIQd4k+M= Received: by 10.78.136.9 with SMTP id j9mr869929hud.1190414446179; Fri, 21 Sep 2007 15:40:46 -0700 (PDT) Received: by 10.78.146.16 with HTTP; Fri, 21 Sep 2007 15:40:46 -0700 (PDT) Message-ID: <342e1090709211540i3daf5329m76c84beeaeafa3b2@mail.gmail.com> Date: Fri, 21 Sep 2007 19:40:46 -0300 From: "Daniel da Veiga" To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] {OT} Opinions on Host's Decision Please In-Reply-To: <49bf44f10709211437l67dfa91av64dc4df6b25fa385@mail.gmail.com> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <49bf44f10709211437l67dfa91av64dc4df6b25fa385@mail.gmail.com> X-Archives-Salt: 1d0b56f9-216a-40d5-b316-7bb914b6f87c X-Archives-Hash: 48126918fa4b644bb1d8297f6e0c267d On 9/21/07, Grant wrote: > Hello, > > As I have previously posted about, my host sent me an email a few days > ago stating that support tickets for 5,000-6,000 of their clients had > been broken into. I checked my records and found that my root > password had previously been submitted in a support ticket. I then > decided I needed to reinstall my system. > > I requested that my host allow me access to a second machine for 2-5 > days while I switch over to a clean system, after that I would turn > the old system over to them and continue with the new system. > > My request was denied! I'm blown away by this. Was I asking too much? > Information that was valuable leaked because they screw it, so, no matter what terms of service say, they must fix their own mistakes. If the machine crashes, the data center is burned down to the ground or the manager's kid pull the plug on the main server, that's a situation where they can say "not our fault, deal with it". But in your case their support system had a breach, and thus its their fault. They must provide you the means to ensure that YOUR information is safe, cause they caused the incident in the first place. You're unsure about your information, and information is money. If I were you I would be backing up my data by now, would then request a physical backup and after I get it: 1) Send them email about the actions I'm about to take. 2) Move away from their services and look for a better server. 3) Write a cool blog entry about their services and how secure they are. Of course they could answer the (1) email granting your requests and maybe you wouldn't have to take steps (2) and (3). Happened to me once. -- gentoo-user@gentoo.org mailing list