Cloud Provider DigitalOcean Exposes Users' VM Data(wired.com)

9 pointsby signifiersvor 13 Jahren4 comments

Cloud Provider DigitalOcean Exposes Users' VM Data

http://www.wired.com/wiredenterprise/2013/04/digitalocean/

4 comments

Rackspace/Slicehost & VPS.NET were identified for the same issue April 2012 [1]. Cloud providers MUST securely erase customer media upon release, so that this attack cannot happen.

[1] https://news.ycombinator.com/item?id=3890905

rammarkvor 13 Jahren

I hope that part of their follow-up to this includes information about not being able to fully trust that non-encrypted data on SSD drives can be 100% wiped. Users of hosting services should not be storing extremely sensitive unencrypted information on any shared hardware.

voidlogicvor 13 Jahren

They fixed it: https://www.digitalocean.com/blog_posts/resolved-lvm-data-is...

dannowattsvor 13 Jahren

ouch...