所有VPS全部挂了，所用用户资料 + VPS资料全部泄露（还把下载地址挂到官网上了...）
总共9403个VM，109个节点
总共9403个VM，109个节点
通过以下 Referral 链接购买 DigitalOcean 主机，你将可以帮助 V2EX 持续发展
› DigitalOcean - SSD Cloud Servers
This topic created in 4891 days ago, the information mentioned may be changed or developed.
Supplement 1 · Jun 19, 2013
官方更新：以下节点的资料可能无法恢复
LA18, ATL1, ATL4, ATL5
然后ChicagoVPS决定放弃SolusVM了。
LA18, ATL1, ATL4, ATL5
然后ChicagoVPS决定放弃SolusVM了。
 |
ma6174Jun 18, 2013
1
强烈关注
|
 |
haruhiJun 18, 2013
2
SolusVM漏洞吧？昨天还是前天我就收到oneasiahost的邮件了…马上ssh修改root密码，网页重置面板登陆密码…
|
 |
2codeJun 18, 2013
3
吓出一声冷汗，请问一下信息来源？
|
 |
binuxJun 18, 2013
4
使用paypal付款 √
禁用ssh密码登陆 √ 独立密码 √ 没有数据 √ 应该问题不大。。 |
 |
molinxxJun 18, 2013 via Android
5
我的图床挂了。。。WTH
|
 |
zencodingJun 18, 2013
6
无有看到，正常呀
|
 |
7
@binux 对于我个人来说：
使用Paypal付款 Yes 禁用SSh密码登录 No 独立密码 Yes 没有数据 （怎么可能是No，要不然你买VPS干嘛） 反正这个VPS只是装最新版PHP折腾用的，挂了就挂了... |
 |
yanwenJun 18, 2013
10
貌似是很久之前的事情？？？
|
 |
welsmannJun 18, 2013
11
这事儿很久之前了
|
 |
yylzcomJun 18, 2013
12
是16号（北京时间17号）的solusVM的sql注入密码吧，不过好像受影响的就只有ramnode啊，没听说chicagovps也受影响
|
 |
gongyiyiJun 18, 2013
13
最近solusvm真是被人推到了风头浪尖啊！
|
 |
yinxingrenJun 18, 2013
14
默默的求个下载地址。。
|
 |
xvbinJun 18, 2013
15
哎，我的VPN啊。。。。
|
 |
chemhackJun 18, 2013
16
拖了很久了。。。。
|
 |
wzxjohnJun 18, 2013
17
目测悲剧了。。。VPS好像Down了。。。
|
 |
alphammJun 18, 2013
18
求放出裤子。原下载地址不行了
|
 |
darkbillJun 18, 2013
19
ramnode的邮件里面是这么说的，
The following information was contained in the leaked database: first names, last names, email addresses, and SolusVM account information. No telephone numbers, street addresses, or billing information was compromised. 就是只有名字、账户信息被泄露了。。。 |
 |
princeofwalesJun 18, 2013
21
假的，我的VPS今天没有停啊
top - 21:15:39 up 31 days, 18:39 |
1 |
chainkhooJun 18, 2013
23
=.-还好早就撤离了chicagovps 之前觉得他家超售太严重了 就闪人了
|
 |
likukuJun 18, 2013
24
ssh 必须 only public_key 认证啊...
|
|
25
|
|
26
ChicagoVPS的官方说明出来了：
Around 3am Eastern Standat Time (EST) today, there was a security breach, due to a vulnerability in SolusVM that allowed a command line to be run to dump the ChicagoVPS SolusVM client database and attempt to delete all data from our nodes. Our staff is working tirelessly to get everything back online, along working with SolusVM to address the root issue and no furthur impact is expected. Now what does this mean for the customer? All passwords should be changed, this includes passwords for SolusVM control panel and your VPS. This data leak does not include billing information or credit card information. Thus far we are having great success in getting nodes back online with no data loss, however, there are a few that were not recoverable and will be restored using our offsite backups. Once the situation is 100% complete and back to normal we will send another email out. We understand the sevarity and importance to get everything back online quickly. With that in mind, please try to refrain from opening a ticket or replying to an old one as it only slows us down even more. We are doing our best, and hope to have this fully resolved within 24 hours. Thank you for your patience and understanding. Regards Your ChicagoVPS Team |
 |
lll9pJun 19, 2013 via Android
28
SolusVM漏洞，貌似影响很大啊，host1free的vps也被一撸到底。。。
|
|
yylzcomJun 19, 2013
29
完了，是真的，我今天早上收到邮件了，速度去改密码
|
 |
sdysjJun 19, 2013
30
chicagoVPS早给人拖好几次库了，还在混？
|
 |
FanErrorJun 19, 2013
31
BuyVM好像也是SolusVM呀，没影响？
|
 |
tititakeJun 19, 2013
32
中招，到现在还是没法管理vps。
Virtual Server Control Status: Unavailable |
 |
webflierJun 19, 2013
34
RamNode和ChicagoVPS都有我的vps。
其中RamNode挂了8个VPS，点背到极点~~~ |
 |
jqw1992Jun 19, 2013
35
我的也是...网站主题被人删了...
|
 |
manoonJun 19, 2013
36
压力不大。。。很庆幸，上周有把所有VPS上面的数据备份了一下。哈哈。
|
 |
sopatoJun 20, 2013
38
哗~~~看来是大时间，强烈关注。
|
 |
ibudaoJun 20, 2013
40
应该是solusvm面板的0day漏洞引起。今天折腾起我在123systems上的vps，突然发现控制面板上不去了，于是发了个ticket过去，得到如下回复：
The exploit from 6/16/2013 has been patched by the software distributor, however, numerous reports are still stating that there are several other zero day exploits currently unknown to the software distributor and are still unpatched. 详见：https://www.123systems.net/policy.html |
 |
pubbyJun 20, 2013
41
额，123systems有没有沦陷啊，上面还有好几个vps
|
 |
bearqqJun 22, 2013
42
@vibbow 可以求个裤子么。。想了好久还是来做伸手党了。因为之前在chicago上用过一段时间，后来扔了。当时root密码和我现在好多账号包括vps密码是同一个，如果裤子里还有的话。。。
|
|
tititakeJun 26, 2013
44
现在你们的vps可以管理了吗？我怎么在 hxxps://billing.chicagovps.net/clientarea.php?action=products 找不到管理入口？邮件里面说应该有个"Virtual Server Control"。死活没找到。。。
|
|
45
@tititake 我发了Ticket，在排队等装回Ubuntu，现在是CentOS...
现在是在WHMCS里管理了，只能进行简单的开关机改root密码，更高级的诸如重装系统之类的需要发ticket |
|
48
|
|
tititakeJun 27, 2013
52
|
 |
ElmerZhangJun 27, 2013
55
@binux 我全Yes，买了个最小的VPS翻墙用的
|
|
tititakeJun 28, 2013 via Android
56
再问个问题，chicago vps有说什么补偿方案吗？还是就这么过去了？
|
Select Language