Timeline for Could a VPS provider have access to the content of their users?
Current License: CC BY-SA 3.0
14 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 16, 2020 at 9:49 | history | edited | CommunityBot |
Commonmark migration
|
|
| Apr 1, 2020 at 19:29 | comment | added | Jonathan Cross | Digital Ocean: "Upon receipt of a valid search warrant, if these pieces of information are available, we can disclose content of customer virtual machines, the content of user communications with customer support, or other forms of content data." | |
| Oct 26, 2015 at 18:59 | comment | added | Jon Bentley | @hipocd In my opinion a full disk encryption will simply add more complexity (and a small performance hit) for almost no gain. It will also require manual input from a password holder any time the machine reboots. Only the most trivial of attackers will be put off by it (e.g. a bored employee at the hosting company, who doesn't care specifically about your data). Consider that if the hosting company is bothering to try to access your data in the first place, then they must have a compelling reason to do so, in which your security by obscurity will not be an obstacle. | |
| Oct 26, 2015 at 15:22 | comment | added | David | Thanks for the exhaustive answer, The reason I do not choose to host my server on my own premise is because my ISP dos not offer the possibility to buy a public ip. A full disk encryption even if it is not totally secure as you mention above is definitely better than nothing. Could you redirect me to a guide that explain how to do this ? | |
| Oct 26, 2015 at 2:09 | comment | added | Peter Green | You can have an initrd that runs a ssh server and then waits for someone to ssh in and provide the encryption password but ultimately it doesn't help much because of the other ways the host can get in if they want to. | |
| Oct 25, 2015 at 23:44 | comment | added | Philipp | @Freedo How are you going to SSH into a machine which is currently on the bootloader prompting for the disk encryption password? | |
| Oct 25, 2015 at 22:37 | comment | added | Freedo | The solution for your first point is to not use their console but any SSH client on your own machine | |
| Oct 25, 2015 at 21:44 | comment | added | jmoreno | All of the software the client installs, including any full disk encryption, is running on hardware they control, so it may not be as installed as one would like. As with administrators, you fundamentally have to have some degree of trust in whoever is hosting your server. And as with administrators, if you don't trust them, the solution is not to use them. | |
| Oct 25, 2015 at 20:25 | vote | accept | David | ||
| Oct 25, 2015 at 19:59 | history | edited | Philipp | CC BY-SA 3.0 |
added 1 character in body
|
| Oct 25, 2015 at 19:50 | history | edited | Philipp | CC BY-SA 3.0 |
added 27 characters in body
|
| Oct 25, 2015 at 19:45 | history | edited | Philipp | CC BY-SA 3.0 |
added 27 characters in body
|
| Oct 25, 2015 at 19:39 | history | edited | Philipp | CC BY-SA 3.0 |
added 27 characters in body
|
| Oct 25, 2015 at 19:33 | history | answered | Philipp | CC BY-SA 3.0 |