Hi Kabe,
I think there might be sufficient grounds to believe that might be the case, and I guess we cannot know for sure. What I can tell you, is that I personally won't be hosting any more relays with them in the future.
Zimmer
Hi there Zimmer
Thanks for the detailed and honest write up, it was an interesting read. I was the one who notified the network health team last Friday after my SSH login was intercepted.
I was wondering how the other relay operators were compromised since it seems unrealistic that they just happen to get the credentials of ~27 other operators.
Looking at my data from October 2 again, 26 of the 27 other compromised relays were hosted at FranTech/BuyVM.
Could they have compromised those servers at the hoster level?
- Kaba
_______________________________________________
tor-relays mailing list -- tor-relays@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to tor-relays-leave@xxxxxxxxxxxxxxxxxxxx