Slashdot Mirror

← Back to Stories (view on slashdot.org)

Hosting Provider Automatically Fixes Vulnerabilities In Customers' Websites

Posted by Soulskill on from the what-could-possibly-go-wrong dept.

An anonymous reader writes "Dutch hosting provider Antagonist announced their in-house developed technology that automatically detects and fixes vulnerabilities in their customers' websites. The service is aimed at popular software such as WordPress, Drupal and Joomla. 'As soon as a vulnerability is detected, we inform the customer. We also explain how the customer can resolve the issue. In case the customer does not respond to our first notice within the next two weeks, we automatically patch the vulnerability.' Antagonist plans to license the technology to other hosting providers as well."

2 of 73 comments (clear)

  1. Re:Why not fix it immediately? by sabri · · Score: 5, Interesting

    In two weeks it might be too late.

    You're talking about customer data here. They may have some customizations in the code that break if you allow yourself to patch it.

    I would take another approach: disable the vulnerable file until the customer fixes it. By fixing it for them you may generate expectations which you'll not be able to match in the long run: "don't worry about software updating, the hosting company will do it for us".

    --
    I'm not a complete idiot... Some parts are missing.
  2. Re:Why not fix it immediately? by loufoque · · Score: 3, Interesting

    It would have to detect that it can safely apply the patch. Also it could be opt in, of course.