YHK - yet another hacker news clone

Active incident at Dreamhost forcing password reset

55 points greenchair 6 hours ago 22 comments

whyage 1 hour ago | parent

What's going on with Dreamhost lately? Is it falling apart?

AznHisoka 52 minutes ago | parent

I havent seen anyone talk about it for the last 10-15 yrs. I would have guessed it fell apart already

PaulDavisThe1st 33 minutes ago | parent

They abandoned all support for email lists a couple of months back. Will likely move after 20+ years on DH.

forgotmypw17 50 minutes ago | parent

Working pretty well for me.

donohoe 12 minutes ago | parent

Same. Into my second decade with them. Great value, no real complaints.

therein 1 hour ago | parent

Now that's a blast to the past. What's next, Rapidshare.de is having issues?

tuwtuwtuwtuw 23 minutes ago | parent

Angelfire shut down this year so not them at least.

duskwuff 1 hour ago | parent

Reading the tea leaves: given that the outage started with "connectivity issues affecting the File Manager", which was an install of Monsta FTP [1] - a commercial PHP application - I suspect the file manager got popped by one of the recently published PHP vulnerabilities, and users' FTP credentials may have been exfiltrated.

[1]: https://www.monstaftp.com/

MuffinFlavored 59 minutes ago | parent

hopefully their hashed/salted passwords, right? not plaintext?

duskwuff 48 minutes ago | parent

Internally, sure. But the application that was (probably) compromised was an FTP client, so it would have received the plain text of those passwords from users as they logged in.

traeregan 7 minutes ago | parent

20 year customer here. This morning I asked their support chatbot if this is related to the PHP vulnerabilities and it assured me that's not the case. I'm skeptical.

These status updates from the PHP incident would also have us believe that they were never directly affected: https://www.dreamhoststatus.com/pages/incident/575f0f6068263...

They're being awfully vague about this issue so far. 8 hours ago I submitted a ticket requesting more information and they've not responded yet. I guess that they're still in the thick of it.

forgotmypw17 51 minutes ago | parent

Ah, I noticed this yesterday, figured it was just me.

paulbjensen 8 minutes ago | parent

Dreamhost - gosh that brings back memories…