ana_mad
Member
OP
- Joined:
- Jun 2024
- Posts:
- 298
- From:
- Madrid, ES
So I logged in to my VPS this morning and found /mnt/backup_8472/ sitting there with a full database dump. Not mine. Different customer name in the filename, complete with credentials and user table. Sent ticket yesterday and provider pulled it in 20 minutes, but wow. Made test order with same plan to see if reproducible, and actually got clean provision.
How common is this kind of hypervisor misconfiguration? I always thought storage was properly isolated. Cheers!
swimming upstream since 2019 🐟
haroldgsm
Member
Grumpy Old Sysadmin
- Joined:
- May 2024
- Posts:
- 329
- From:
- Ohio, US
How common is this kind of hypervisor misconfiguration?
This happened to me in 2023, different provider. Someone else's snapshot was visible in the server. I make ticket and they fix in one hour. How much times this happen and people don't notice? Actually scary friend.
IPv4, IRC, and irssi — fight me
ana_mad
Member
OP
- Joined:
- Jun 2024
- Posts:
- 298
- From:
- Madrid, ES
Actually scary is right. How many never check /mnt?
swimming upstream since 2019 🐟
haroldgsm
Member
Grumpy Old Sysadmin
- Joined:
- May 2024
- Posts:
- 329
- From:
- Ohio, US
Same thing in 2022, snapshot from another tenant visible
IPv4, IRC, and irssi — fight me
