Active incident at Dreamhost forcing password reset

(dreamhoststatus.com)

39 points | by greenchair 5 hours ago

4 comments

  • duskwuff 8 minutes ago
    Reading the tea leaves: given that the outage started with "connectivity issues affecting the File Manager", which was an install of Monsta FTP [1] - a commercial PHP application - I suspect the file manager got popped by one of the recently published PHP vulnerabilities, and users' FTP passwords got stolen in the process.

    [1]: https://www.monstaftp.com/

    • MuffinFlavored 2 minutes ago
      hopefully their hashed/salted passwords, right? not plaintext?
  • whyage 58 minutes ago
    What's going on with Dreamhost lately? Is it falling apart?
  • therein 21 minutes ago
    Now that's a blast to the past. What's next, Rapidshare.de is having issues?
  • sunjester 1 hour ago
    [flagged]
    • jawns 14 minutes ago
      I've been a user for more than 20 years. With their shared hosting plan, which was about $5/mo. when I joined and is now $13/mo, I've been able to host my personal blog and professional site, as well as probably 3 dozen other sites over the years, including several that have hit the HN front page and never got hugged by the squeeze of death.

      Honestly, compared to some of the professional environments I've worked in, it's a joy to have an idea, create a few PHP files, and in a matter of seconds have that idea live.

    • pockybum522 4 minutes ago
      Me, for all the reasons listed so far in comments
    • rpdillon 45 minutes ago
      Been a customer for decades, love them.
      • 0898 33 minutes ago
        Do you remember the cool newsletters they used to do?
    • Arainach 24 minutes ago
      It's cheap and reliable with predictable costs. It hasn't caused me any problems in a decade. Most of the websites I want to host don't need cloud anything, they're statically generated.
    • ceejayoz 1 hour ago
      A shitload of small business sites that were built years ago and haven't been touched since.
      • SoftTalker 51 minutes ago
        If they are static sites that shouldn't be a problem. Many are probably not though.
        • ceejayoz 45 minutes ago
          My suspicion is at least half are unpatched WordPress installs.
          • Jgrubb 37 minutes ago
            My suspicion is closer to 95%