linode被爆客户信用卡资料被黑客窃取

April 16th, 2013 No comments

前几天莫名其妙的账户被多扣了20美金,应该是linode被爆客户信用卡资料被黑客窃取的前兆,linode的支付方式只支持信用卡,被多数国人诟病。为啥不支持Paypal呢,为啥不支持支付宝呢?经过此次黑客窃取linode客户信用卡资料事件,我想linode应该有所动作了。不过看看如下的linode官方博客声明,大意是客户的信用卡资料是存储在数据库中的,但是以公钥,私钥加密。平时大家在linode管理后台看到的卡号末尾4位,是便于核对和查找支付记录的。目前没有证据表明,客户的信用卡资料被窃取,但是安全起见,建议大家关闭境外支付,或者更新换卡。

Yesterday, a group named HTP claimed responsibility for accessing Linode Manager web servers, we believe by exploiting a previously unknown zero-day vulnerability in Adobe’s ColdFusion application server. The vulnerabilities have only recently been addressed in Adobe’s APSB13-10 hotfix (CVE-2013-1387 and CVE-2013-1388) which was released less than a week ago.

As a result of the vulnerability, this group gained access to a web server, parts of our source code, and ultimately, our database. We have been working around the clock since discovering this vulnerability. Our investigation reveals that this group did not have access to any other component of the Linode infrastructure, including access to the host machines or any other server or service that runs our infrastructure.

Credit card numbers in our database are stored in encrypted format, using public and private key encryption. The private key is itself encrypted with passphrase encryption and the complex passphrase is not stored electronically. Along with the encrypted credit card, the last four digits are stored in clear text to assist in lookups and for display on things like your Account tab and payment receipt emails. We have no evidence decrypted credit card numbers were obtained.

Linode Manager user passwords are not stored in our database, but their salted and cryptographically hashed representations are. Despite the uselessness of these hashes, as you know we expired Linode Manager passwords on Friday.

There were occurrences of Lish passwords in clear text in our database. We have corrected this issue and have invalidated all affected Lish passwords effective immediately. If you need access to the Lish console, you can reset a new Lish password under the Remote Access sub-tab of your Linode.

For users who have set an API key, we’re also taking action to expire those keys. We’ll be emailing API-enabled users with that information.

We take your trust and confidence in us very seriously, and we truly apologize for the inconvenience that these individuals caused. Our entire team has been affected by this, leaving all of us, like you, feeling violated. We care deeply about the integrity of Linode and are proud of the work that we accomplish here for you. This unfortunate incident has only strengthened our commitment to you, our customer.


若非注明,本博客内容均为原创或翻译自Linode Library,教程默认Centos为linux发行版,转载请注明转自linode中文教程www.linode.im。linode中文教程QQ群:185393826,一起讨论linode及linux,linode中文教程、linode代购、linode合租、linode推介、linode返佣、linode优惠。日本VPS、美国VPS、海外独立服务器代购均在linode.im。

krypt独立服务器4月团购促销@yqf.me独家发布

April 13th, 2013 No comments

套餐名称CPU内存磁盘带宽IP默认官方价格@yqf.me团购KT价节省
Intel Dual Core 2.5GHzE52002G320GB SATA10TB3IP$89.95310元250元
Intel Dual Core 2.6GHzE53002GB320GB SATA10TB3IP$94.95310元280元
Intel Dual Core 2.7GHzE54002GB320GB SATA10TB3IP$99.95310元315元
Intel Dual Core 3.0GHzE57002GB320GB SATA10TB3IP$104.95310元340元

 

蛇年春节的时候,yqf.me上架了21台低配的atom330/D510/D525,非常畅销。后来淘宝咨询KT毒妇春节特价机的至少有50个网友,的确,KT官方春节促销优惠力度很大,抢购到krypt春节促销特价机的朋友那是相当的划算。

为了满足广大网友对KT毒妇的需求,yqf.me开展一次krypt独立服务器4月团购促销活动,上表中的机型E5200/E5300/E5400/E5700随机给到客户的是哪个就是哪个。

CPU是奔腾双核E5200/E5300/E5400/E5700,多数是E5300/E5400,内存均为2G,磁盘多数是500G磁盘,带宽100M独享,流量10TB/月,默认3IP,团购统一价310元(不含win授权),续费同价,预购从速。史上再也无此特价优惠!比KT官方蛇年的促销力度更大,而且配置更高,价格更优惠!

另外,此次团购KT活动,一律支持过户,统一过户费是100元,linux用户的话,续费是50美金;window2003标准版用户,因为要5美金win授权,续费是55美金。


若非注明,本博客内容均为原创或翻译自Linode Library,教程默认Centos为linux发行版,转载请注明转自linode中文教程www.linode.im。linode中文教程QQ群:185393826,一起讨论linode及linux,linode中文教程、linode代购、linode合租、linode推介、linode返佣、linode优惠。日本VPS、美国VPS、海外独立服务器代购均在linode.im。

谁这么大胆敢黑linode啊?

April 13th, 2013 No comments

linode-passwd

早上起来收邮件,我的几个linode账户收到邮件提醒,说linode被人黑了,所幸客户的数据和资料没有被动过。我猜测是不是linode最近升级,动了某些人的奶酪,所以黑一下linode,以示警告?谁这么大胆,敢黑linode呢?

被黑迹象(猜测):前天我的某linode账户,莫名其妙扣了20美金,不过后来linode自动给补齐了。

友情提醒:建议大家的linode账户里的信用卡,全部修改成5431-1111-1111-1111样卡,避免受损失。

安全建议:不要用字典里有的密码字段;不要在多项服务里面采用同一个密码;不要点击来历不明的修改密码连接,需要去官方页面登陆修改密码;定期修改密码。

Dear Linode customer,

Linode administrators have discovered and blocked suspicious activity on the Linode network. This activity appears to have been a coordinated attempt to access the account of one of our customers. This customer is aware of this activity and we have determined its extent and impact. We have found no evidence that any Linode data of any other customer was accessed. In addition, we have found no evidence that payment information of any customer was accessed.

We have been advised that law enforcement officials are aware of the intrusion into this customer’s systems. We have implemented all appropriate measures to provide the maximum amount of protection to our customers. Out of an abundance of caution, however, we have decided to implement a Linode Manager password reset. In so doing, we have immediately expired all current passwords. You will be prompted to create a new password the next time that you log into the Linode Manager. We also recommend changing your LISH passwords and, if applicable, regenerating your API key.

The following represent best practices in creating new passwords:
Avoid using simple passwords based on dictionary words
Never use the same password on multiple sites or services
Never click on ‘reset password’ requests in unsolicited emails – instead go directly to the service
We apologize for the inconvenience. If you have any questions, please do not hesitate to contact our support team at [email protected]


若非注明,本博客内容均为原创或翻译自Linode Library,教程默认Centos为linux发行版,转载请注明转自linode中文教程www.linode.im。linode中文教程QQ群:185393826,一起讨论linode及linux,linode中文教程、linode代购、linode合租、linode推介、linode返佣、linode优惠。日本VPS、美国VPS、海外独立服务器代购均在linode.im。

linode升级第三波:内存翻倍,取消512低配套餐

April 10th, 2013 No comments

linode升级第一波:http://www.linode.im/2243.html,主要升级带宽和流量,带宽5倍速,升级完成的话,带宽是250Mbps,流量10倍,最低配是2TB流量/月。

linode升级第二波:http://www.linode.im/2315.html,cpu更换型号,变8核。

linode升级第三波:内存翻倍,取消512低配套餐。

全新购买VPS的话,直接买的最低配就是1G的了,无512套餐,老客户手里有512套餐的,需要点下升级,平滑升级到1G套餐。

最新的linode vps套餐配置以及价格表如下:

Plan RAM Disk XFER CPU Price
Linode 1G 1 GB 24 GB 2 TB 8 cores (1x priority) $20 / mo
Linode 2G 2 GB 48 GB 4 TB 8 cores (2x priority) $40 / mo
Linode 4G 4 GB 96 GB 8 TB 8 cores (4x priority) $80 / mo
Linode 8G 8 GB 192 GB 16 TB 8 cores (8x priority) $160 / mo
Linode 16G 16 GB 384 GB 20 TB 8 cores (16x priority) $320 / mo
Linode 24G 24 GB 576 GB 20 TB 8 cores (24x priority) $480 / mo
Linode 32G 32 GB 768 GB 20 TB 8 cores (32x priority) $640 / mo
Linode 40G 40 GB 960 GB 20 TB 8 cores (40x priority) $800 / mo

目前fremont机房内存升级还需要等待大概2周时间。

We’ll be enabling the upgrade by data center very soon, with the exception of Fremont which may take another week or two – we’ll be explaining more on Fremont in another post.

Fremont, CA: TBD
Dallas, TX: Upgrades are available
Atlanta, GA: Upgrades are available
Newark, NJ: Upgrades are available
London, UK: Upgrades are available
Tokyo, JP: Upgrades are available


若非注明,本博客内容均为原创或翻译自Linode Library,教程默认Centos为linux发行版,转载请注明转自linode中文教程www.linode.im。linode中文教程QQ群:185393826,一起讨论linode及linux,linode中文教程、linode代购、linode合租、linode推介、linode返佣、linode优惠。日本VPS、美国VPS、海外独立服务器代购均在linode.im。

linode升级第二波:CPU更换型号,变8核

April 10th, 2013 No comments

linode升级第一波:http://www.linode.im/2243.html,主要升级带宽和流量,带宽5倍速,升级完成的话,带宽是250Mbps,流量10倍,最低配是2TB流量/月。

linode升级第二波:主要是升级CPU,更换CPU型号,同时CPU变8核。

8core

Powering our NextGen hosts are two Intel Sandy Bridge E5-2670 processors. The E5-2670 is at the high end of the power-price-performance ratio.   Each E5-2670 enjoys 20 MB of cache and has 8 cores running at 2.6 Ghz.  We’ve also moved to the latest generation of the enterprise-grade hard disk drives — doubling their cache, increasing their port speed, and decreasing latency and access time.

主要提供E5-2670的CPU,20MB的缓存,8核,2.6Ghz。

至于大家关心的linode是否会升级SSD磁盘,目前linode官方给的答案是,现在SSD磁盘应用还不是很成熟,企业级的应用价格高昂,性价比不是很好,坐等企业级SSD应用普及后,他们不排除用SSD的可能。


若非注明,本博客内容均为原创或翻译自Linode Library,教程默认Centos为linux发行版,转载请注明转自linode中文教程www.linode.im。linode中文教程QQ群:185393826,一起讨论linode及linux,linode中文教程、linode代购、linode合租、linode推介、linode返佣、linode优惠。日本VPS、美国VPS、海外独立服务器代购均在linode.im。

新加坡VPS:OneAsiaHost:KVMSSD-512简单测评

April 6th, 2013 No comments

OneAsiaHost,新加坡VPS,据说母公司是HOSTSG,今天有空购买了一款KVMSSD-512,顺便对其简单测评,需要新加坡VPS的朋友,可以参考下我的测评数据。我买的是15美金一月的,磁盘15G,SSD磁盘,流量400G/月,内存512M,SolusVM控制面板,KVM架构。

1、系统默认centos5.8,KVM需要自己安装centos,他家的KVM比别家的更干脆,压根连默认的系统都不给装好,需要自己动手安装,真正的无人管理型VPS。

[[email protected] ~]# cat /etc/issue
CentOS release 5.8 (Final)
Kernel \r on an \m

2、双核CPU。母鸡配置:Intel Xeon E3-1245V2 3.4Ghz, 32GB RAM, 32GB RAM,但是cat /proc/cpuinfo无法显示CPU型号。

Read more…


若非注明,本博客内容均为原创或翻译自Linode Library,教程默认Centos为linux发行版,转载请注明转自linode中文教程www.linode.im。linode中文教程QQ群:185393826,一起讨论linode及linux,linode中文教程、linode代购、linode合租、linode推介、linode返佣、linode优惠。日本VPS、美国VPS、海外独立服务器代购均在linode.im。

linode东京机房缺货难道是饥饿营销?

April 2nd, 2013 No comments

linode-tokoya

网友找我买个linode的东京机房,准备搭建VPN用,结果东京机房一直显示缺货。自从linode硬件升级后,带宽5倍速,流量10倍翻后,linode东京机房玩起了饥饿营销。当然,这只是我的一方猜测,如果不是饥饿营销,那就彰显了国人的威力,国人如蝗蜂一样,来势汹汹,势不可挡。


若非注明,本博客内容均为原创或翻译自Linode Library,教程默认Centos为linux发行版,转载请注明转自linode中文教程www.linode.im。linode中文教程QQ群:185393826,一起讨论linode及linux,linode中文教程、linode代购、linode合租、linode推介、linode返佣、linode优惠。日本VPS、美国VPS、海外独立服务器代购均在linode.im。