Bunny used Gcore in Armenia. Gcore themselves got hacked, not Bunny. Bunny was just an affected downstream, in only one of their POPs.
https://lowendtalk.com/discussion/222315/gcore-compromised-v...
The title is heavily misleading.
Bunny used Gcore in Armenia. Gcore themselves got hacked, not Bunny. Bunny was just an affected downstream, in only one of their POPs.
https://lowendtalk.com/discussion/222315/gcore-compromised-v...
The title is heavily misleading.
It's not really misleading. A lot of people here use Bunny and this is a relevant security incident. It's not a major failing but rather a "hey shit happened come make sure if it applies to you that you respond in kind".
NGL it's the exact wording I'd personally like to see from a product that had an infra provider have an incident just so that I can mentally tune in enough to figure out if I need to care.
Do I need to post the Rickover responsibility copypasta again? Simply put service providers own their outsourcing decisions and those consequences. Getting popped by shitty hosting services is a risk of using those services.
Bunny is doing the right thing here and owning it.
> "Bunny used Gcore in Armenia."
I'm unsure, but I have to ask: isn't this company Russian-controlled (with Luxembourg and Cyprus shell-company fronts)? Their Wikipedia entry[0] features a controversy involving RT (Russia Today); and a number of their top employees (i.e. Vsevolod Vayner) seem to live in Russian cities; and Moscow was their 2nd cloud location, after Luxembourg[1].
I'm not sure if I've got this right (most of the primary sources are Russian websites that block me and also block Western internet archives; I'm gleaning some things from Google preview caches). But: is it possible the #1 "European sovereign CDN" has been acting as a white-label reseller for Moscow? Is it possible they willingly trusted all of their customers' TLS certificates to a contractor operating from Russia?
Someone kindly fact-check me.
[0] https://en.wikipedia.org/wiki/Gcore#Controversies
[1] https://web.archive.org/web/20260420215140/https://www.strea...
I found an additional source of interest (translated from German):
> "An employee appears to be offering Medvedev access to intelligence information" [...] "This recording shows Michael Shurygin, then-head of GCore Russia, apparently discussing plans with former Russian President Dmitry Medvedev in April 2021."
> [...] "The group laughs. Shurygin had made a pun that only works in Russian: “Introduced”—that is, внедрять (vnedryat’)—is ambiguous. It can also be understood to mean “to penetrate” or “to infiltrate.” So they would have infiltrated Luxembourg. Medvedev says, “I hope on behalf of the state.” And they laugh again."
https://correctiv.org/aktuelles/russland-ukraine-2/2023/02/1...
(Who?) https://en.wikipedia.org/wiki/Correctiv
Based on what I know, Gcore split it's Russian business into "Edgecenter" after 2022. What that means in reality? Probably not much.
Last week, after spending 30 minutes placing one order in Uber Eats, I finally hit the last confirm and it told me the restaurant was no longer taking orders that night. I called the restaurant and they said they couldn't help: they only take orders over Uber Eats and they can't control UE's system.
Yes, they absolutely could help. They could take an order over the phone. They could choose a subcontractor who delivered good service to the restaurant's customers. The restaurant is 100% responsible.
If I used a subcontractor for a client, not in a million years would I tell the client, 'the subcontractor's failure isn't my problem; I can't control them'. I would look like a joke, entirely unreliable and clueless.
Being affected downstream means it's a security incident regardless? I don't understand why you think this is misleading, incomplete context in the title? Sure.