NSS — Tue, 03 Apr 2001 20:50:36 +0000

Jaiem,

I have just taken 4 Panadol headache tablets and disappeared for a while until everything gets back to normal before answering my clients calls.

J/K ...Hehe I will face the music and won't run away from my responsiblities!

Jaiem — Tue, 03 Apr 2001 20:30:39 +0000

YIKES! That's a nasty bugger!

NSS — Tue, 03 Apr 2001 18:52:55 +0000

Yeah I agree with Marc, "Honesty is the best policy" BUT....I having a hard time explaining to my clients why their sites are not accessable?

From one of my Host which I am a reseller and having
10 client hosted with them, They are a low cost hosting company with basic features.

Received email from them today.

Quote: Please use the username/password that was originally issued to you to upload
your files to the server. Should you be unable to get access, email us asap.

The reason for this is the following:

At 2pm on Saturday 31 March 2001, we received the following e-mail from
Cobalt:

"I have some bad news. A new virus, called Lion worm, attacked UNIX servers
all around this world starting in China this morning. Your server was
infected. The only solution is to reload the operating software. We
understand that you will lose all site data but there is no other solution.

At this moment your server is off line as it attacks other servers. Please
let us know when you want your machine to be reloaded. Please give us the
time in GMT.

Lion worm emailed your password to china.com We strongly suggest to use
another pasword after the server reload.

We can not use any files from backups, because we do not
know for how long the virus has been dormant on the server."

This is devastating to us. We regret all this inconvenience, but there is
nothing that we could do. We are losing so many customers because of
this.......

mjames — Tue, 03 Apr 2001 18:09:42 +0000

I think honesty is the best policy, using the cliche. I think if my host were hacked, I would let everyone know. At least they would find out at first by me than finding out themselves. Never hide anything.

BTW, I used addr.com very, very briefly when I first was going to use a paid host and quickly left due to such poor customer and technical support. I'm glad I left them before this... and doesn't look like they are going to get too many new customers after this.

mairving — Tue, 03 Apr 2001 16:28:40 +0000

That does bring up a question.

Suppose you find out that one of your sites has been hacked.

You
(a.) Pretend like it didn't happen and hope no one finds out.
(b.) Send an immediate email to all of your customers advising them.
(c.) Have no comment on the issue.
(d.) None of the above.

Anybody have any experiences?

Justin S — Tue, 03 Apr 2001 15:31:11 +0000

Quote: ADDR.com has so far not commented on the alleged heist.

That's because they DON'T HAVE ANYONE to comment on it. Just like not having anyone to comment/reply on/to support requests

Jaiem — Tue, 03 Apr 2001 12:39:24 +0000

Wow!

Doesn't suprise me though. They're one of the more infamous names in hosting.