Piped my security audit to their support three weeks ago. Everything got redirected to /dev/null.
| Core 6.4.3 unpatched since January
| xmlrpc.php wide open
| wp-config readable by www-data
| 47 failed login attempts, no fail2ban
| Plugin with 9.8 CVE active for 6 months
| Backups piped to same bucket as live site
Their sales page says «fully managed, security handled». EOF
I wanted a managed host so I could pipe my time into content, not into being a sysadmin. Instead I'm the one piping cron jobs to update their neglected stack.
Anyone found an actual managed host that doesn't redirect problems to the void? Or is «managed» just marketing noise I should grep out of my vocabulary?
/dev/null: full of good ideas
