Beiträge von dimecadmium

    I understand your frustration.

    Clearly not.

    We decided that securing the systems as fast as possible was more important than risking a security incident that would have affected all of you, and I still believe that was the right decision.

    That has nothing to do with the issue at hand. I have no issue with the fact that you had to reboot your servers to resolve a vulnerability. I have an issue with the fact that you DID NOT NOTIFY ANYONE in advance and then tried to excuse your failure to notify anyone by claiming that you didn't know in advance when you clearly did.

    That said, we learned a lot from this operation for next time, and we will try to send an additional notification by email in such cases.

    You're not a new host. In fact, you've been through this scenario before, with Spectre/Meltdown.

    By the way, we did inform everyone from the very beginning on our official status page, netcup-status.de. I’d recommend subscribing to the RSS feed there as well.

    I don't have an RSS feed reader. If I did, I don't speak German. I'm not sure why you're incapable of sending an email notification when you become aware that you'll have to reboot every server that simply says "Your server will have to be restarted in the next day or two"? (Especially since you're clearly capable of sending such emails, see also "Activate 2FA in the Server Control Panel now.", or "Collective invoice - improvement of the billing system")

    Wird es (dennoch) E-Mails mit Vorankündigung/Zeitfenstern an die Kunden geben?

    Und ist geplant, die Hosts "kreuz und quer" und nicht nach VPS/RS-Typ/Generation "sortiert" neu zu starten?

    🤣🤣🤣🤣🤣🤣🤣🤣🤣🤣🤣🤣🤣🤣🤣


    Ja, es wird eine Mail an Nutzer geben, aber das ist eher eine Ankündigung "wir rebooten jetzt im Anschluss" als eine große Vorankündigung, da wir ungerne Zeit verlieren würden, da das Risiko einfach zu hoch ist.

    Der Rollout ist schon größtenteils durch, die Reboots planen wir gerade durch.

    Sorry für die Umstände, aber Sicherheit geht bei so einer Lücke vor - desto schneller das erledigt ist, desto besser für uns alle :)

    Problem is that it took you at least 3/4 of a day to do that, in which time you could have... guess?... NOTIFIED YOUR CUSTOMERS.