First Linode and now Slicehost. What's happening to quality VPS these days?
Just a wild guess here, but perhaps the same person who compromised Linode's customer service portal was also trying to see if any of his targets were reusing their Slicehost account credentials in the forum?
A support forum being compromised is much different than using the company's internal tools to root systems. I'm guessing they use a 3rd party support forum (eg vBulletin). Maybe a vulnerability in it lead to the breach?
Comments
First Linode and now Slicehost. What's happening to quality VPS these days?
Just a wild guess here, but perhaps the same person who compromised Linode's customer service portal was also trying to see if any of his targets were reusing their Slicehost account credentials in the forum?
Hosting providers being compromised is nothing new.
Probably someone leaking from the inside due to money/incompetence? That makes their PR go worst though. There's a myriad of scenarios.
They can only be upfront and show how well they respond to the situation including mitigating future security issues.
A support forum being compromised is much different than using the company's internal tools to root systems. I'm guessing they use a 3rd party support forum (eg vBulletin). Maybe a vulnerability in it lead to the breach?
Yes - they used Vanilla Forums (http://vanillaforums.org/)