full-disclosure - Hosting Provider Refuses to Share Server Logs -How to Proceed?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA0BKn9uKnWEeCDU7Vx+IAQ8KAAAAQAAAAnyLfefS9Ikuo750rkJoAeAEAAAAA@online.gateway.strangled.net>
Date: Wed Aug  3 04:45:38 2005
From: aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh)
Subject: Hosting Provider Refuses to Share Server Logs
	-How to	Proceed?

> -----Original Message-----
> From: full-disclosure-bounces@...ts.grok.org.uk
> [mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of GeeEm
> Sent: Tuesday, August 02, 2005 5:53 PM
> To: full-disclosure@...ts.grok.org.uk
> Subject: [Full-disclosure] Hosting Provider Refuses to Share
> Server Logs -How to Proceed?
>

This is certainly a sticky situation, if this turn of events were not
covered in AUP then simply take your website hosting business to someone
else and in the meanwhile ask a lawyer to take a look into this matter if
they continue to stone wall you for the logs and other information. After
all you should have access to information on the basis of which you were
presumed guilty. At a minimum you should demand refund of all your web
hosting fees if it worth it.

But if it is not worth it simply move your business somewhere else. But
first do a google search on your website to make sure that you are not
listed in any of the globla blacklists of any phishing sites - if you are
then get in contact with the listing site owners and explain the sitation in
detail to them.

Just make sure that the next hoster has everthing spelled out in the AUP and
make sure that you have access to the log files whatever the case spelled
out clearly in AUP. Also spell out everthing clearly about security....

- 	Aditya Deshmukh,
	Chief Security Officer ,
	Enterprise Security Solutions.

________________________________________________________________________
Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)