Slashdot Mirror

← Back to Stories (view on slashdot.org)

GoDaddy Wants Your Root Password

Posted by samzenpus on from the seems-fair dept.

Johnny Fusion writes "The writer of the Securi Security Blog had an alarming awakening when a honeypot on port 22 on a GoDaddy-hosted VPS recorded login attempts using his GoDaddy username and password and even an attempt to login as root. It turns out the attempt was actually from within GoDaddy's network. Before he could 'alert' GoDaddy about the security breach, he got an email from GoDaddy Demanding his root login credentials. There is an update where GoDaddy explains itself and says they will change policy."

2 of 236 comments (clear)

  1. Re:Feature, not a bug. by batrick · · Score: 5, Interesting

    A VPS is rented space on hardware in the same way you rent an apartment. You don't own the hardware, but that doesn't mean the host can break into your box whenever he wants. Maybe the contract asserts they have that right (you would be an idiot to contract with them). Use Linode (arguably the best VPS provider in the industry): http://linode.com/ (I am not affiliated with Linode.)

  2. Re:No Surprises Here by neoform · · Score: 5, Interesting

    Someone (falsely) accused me of spamming.

    However, even *if* I was a spammer, what right does godaddy have to confiscate my domain? I didn't even have any hosting with them, I just had a domain registered. This is clearly against ICANN policy. Registrars are not arbiters who get to take your domain away because they feel like it.

    --
    MABASPLOOM!