Weblog entry #6 for kaerast
See all weblog entries made by kaerast.
Still, it's not quite as bad as the time we had the vendors of a commercial database system in the office, and one of their marketing people logged into our server through an unpublished SQL injection vulnerability in order to check database size without first asking permission. Tech support, I could almost have forgiven for this, but marketing people knowing about this vulnerability and blatantly using it in front of me?! That to me is completely unacceptable.
Comments on this Entry
[ Send Message | View dkg's Scratchpad | View Weblogs ]
By "upstream providers" do you mean hosts of a colocation facility, or something like that?
When i think of upstream providers, it's usually in the network sense (i.e. "the network i connect to through which i reach the rest of the 'net"). If it's in this latter sense, they really should not have root access on your machine!
Do you have an agreement with your provider about what sort of interactions they should have with your machines? An Acceptable Use Policy or something like that can cut both ways, sometimes, though your final recourse (canceling service) is probably the same no matter what the AUP.
[ Parent | Reply to this comment ]
And if this was in the sense of networking, as I too had thought originally, I'd hand ATT their ass if they ever logged into our edge router without my knowledge, as they are my upstream.
/2cents
[ Parent | Reply to this comment ]