Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [vps]

The tag has no usage guidance, but it has a tag wiki.

-1
votes
2answers
118 views

Testing RCE and SSRF using Python SimpleHTTPServer [closed]

Is it possible to test RCE and SSRF vulnerabilities using Python SimpleHTTPServer? Or should I use a VPS server?
0
votes
0answers
167 views

Encryption on an LXC container?

I have the following scenario. I'm hosting some services on a VPS. Each service is running inside an LXC container. Some services like email contain information that I would like to be stored ...
3
votes
2answers
77 views

VPS with shared resources malloc attack

If I understand it correctly then: C function malloc provides a memory block with indeterminate values (which depend on the previous user of this memory block) Shared VPS hostings share resources ...
0
votes
0answers
29 views

Backing Up Server - Subkey or New Key for Encryption?

I am backing up a series of VPSes I own using duplicity. Since I will be storing this in a storage system like AWS I'd like to encrypt them. I already have a GPG key I use that is registered in ...
1
vote
2answers
2k views

Connecting to my VPN via IP or domain name?

Background: So I use a private VPS to host my own VPN, rather than pay/trust another company to host it for me. I am an intermittent traveller so it is cheaper for me to spin up or down my server as ...
0
votes
0answers
53 views

Hosting provider ability to monitor self hosted Openvpn Server

Maybe I'm kind of paranoid, but how easy would it be for a hosting provider to spy on a openvpn server installed on a linux vps? Is there a way to minimize the risk and is there a way to find out if ...
57
votes
8answers
19k views

Brutalized VPS recovery data now available. Considerations? [closed]

Backstory My sites and VPS were stolen from me. The hosting company and I were locked out and unable to access it. They weren't able to create a temp password for access because the attacker blocked ...
-3
votes
1answer
153 views

Can a VPS provider see the IP address I use when connecting? [closed]

I recently purchased a VPS. Can the provider see the IP address I use when connecting to my VPS?
1
vote
1answer
375 views

what are the disadvantages of running SSH daemon without root?

Is there any risk in running ssh daemon with no root privilege using this method: how-can-i-make-this-daemon-init-run-as-a-non-root-user? Debian Developer's Best Practices for OS Security says the ...
2
votes
1answer
129 views

SSH to IP instead of to fully qualified hostname: does this reduce MITM risk?

I am applying configuration management to a VPS hosted by a VPS hosting company. Changing the hosting company is not an option, unfortunately. This VPS has the following properties: when newly-...
1
vote
2answers
333 views

Why is spoofing allowed in reputed VPS services?

I just learned about IP spoofing and so I set up VMs and sent spoofed UDP packets (8.8.8.8, Facebook's IP, Twitter's IP) to myself (home PC and mobile) from well-reputed VPS providers like AWS, ...
1
vote
2answers
283 views

ownCloud on an encrypted partition on the server

I would like to implement a private cloud-storage on a Linux VPS. For example, I can use ownCloud. I can do the root login on the VPS by ssh. My question is if I can securely encrypt the /var/www ...
0
votes
1answer
93 views

Must one have SSL certificates for each domain, to use HTTPS? [duplicate]

I read in the following passage in this DigitalOcean article, concerning HTTP/2: Even though HTTP/2 does not require encryption, developers of two most popular browsers, Google Chrome and Mozilla ...
0
votes
2answers
463 views

What possible attacks might occur on a SQL Server TCP/IP port?

We have a VPS that contains a SQL Server Express instance. Using SQL Server Configuration we have enabled TCP/IP to listen on a random port, say 5741. We have disabled sa and created another user with ...
1
vote
0answers
517 views

Security Issues Due To Unknown Surveillance Method [closed]

My privacy has been compromised and I suspect some kind of surveillance setup. The stalker can see all outgoing traffic from my digital devices, even when using router in seperate location from my ...
2
votes
3answers
10k views

What is the risk of running VPN on VPS?

Let me try to sum up this question; I want to buy VPS from (vultr - I'm not promoting them), but before that I'm wondering how secure is to run VPN on this kind (or any kind) of VPS in sense that I ...
0
votes
2answers
1k views

What is the purpose of these hacking attempts on my Plesk VPS via postfix?

In my /usr/local/psa/var/log/maillog on my Plesk VPS I get the same set of log messages around every three minutes. I've reproduced an example of them below (my vps name has been changed). Apr 3 18:...
1
vote
1answer
78 views

VPS - scope of responsibility

I'm thinking about getting an VPS to install OpenVPN on it to connect in a secure manner to the Internet from free Wi-Fi networks. My question is, what is the scope of my responsibility, to keep my ...