[MLUG] OT: Montreal datacenters

[The Anarcat]

Security is awful, in general, in datacenters. In Canix, I've had a
visit of a friend who showed up late at a rendez-vous downstairs. The
guy oncall at canix happily escorted the guy upstairs to our cabinet, I
don't know what would have happened if I wasn't there... 

I'm fairly sure I could get anyone inside Canix2 provided I give him the
right tips. And I'm sure the same applies to most DCs in montreal.

Another exemple: at iWeb, to get physical access to a colocated server,
all you need is the mystical server id. Once you get that, you can get a
rendez-vous and get happily escorted to the box. Nowhere is it said that
this famous server id is confidential and it's never crypted in your
communications with them.

A.

On Wed, Jul 16, 2008 at 10:54:01AM -0400, Jean-Francois Theroux wrote:
> Hypertek had good potential, but it's so mismanaged, we can't risk it. Last
> time we visited that site, we managed to get in there using a backdoor that
> wasn't locked ..
> 
> On Wed, Jul 16, 2008 at 10:51 AM, The Anarcat <anarcat at anarcat.ath.cx> wrote:
> 
>     On Wed, Jul 16, 2008 at 10:48:31AM -0400, Jean-Francois Theroux wrote:
>     > Due to the fact we're in the finance industry, our SLAs are 100%. That's
>     mainly
>     > due to the time-sensitivity of our activies: like trading. Because of
>     that, we
>     > need a facility that has seperate physical entries for all that. They
>     need 2
>     > electricity bus, etc.
>     >
>     > So far, as I said before, the only one we found in Canada that meet all
>     those
>     > is located in Toronto.
>     >
>     > We're going to go visit Canix and iWeb on Nuns' Island.
> 
>     AFAIK, Canix2 (ile des soeurs) has the same issue: only one power line
>     coming in. They do have redundant diesel power that should take over
>     without outage, but i'm starting to doubt that now for some reason.
> 
>     a.
> 
>     -----BEGIN PGP SIGNATURE-----
>     Version: GnuPG v1.4.9 (GNU/Linux)
> 
>     iEYEARECAAYFAkh+CvcACgkQWGBzs0AjcC/UjQCfZFCsbQVOMt/TAxsakqygplgu
>     zxMAn0+MkaG52u9+s4gIb5JcoQpenHHG
>     =v7Wn
>     -----END PGP SIGNATURE-----
> 
>     _______________________________________________
>     mlug mailing list
>     mlug at listserv.mlug.ca
>     https://listes.koumbit.net/cgi-bin/mailman/listinfo/mlug-listserv.mlug.ca
> 
> 
> 
> 
> 
> --
> Jean-Fran ois Th roux
> Linux/network security consultant
> http://www.theroux.ca
> 
> Half of what I'm saying to you is meaningless, but it's necessary so that the
> other half may reach you. -Kahlil Gibran

> _______________________________________________
> mlug mailing list
> mlug at listserv.mlug.ca
> https://listes.koumbit.net/cgi-bin/mailman/listinfo/mlug-listserv.mlug.ca


-- 
Pour marcher au pas d'une musique militaire, il n'y a pas besoin de
cerveau, une moelle épinière suffit.
                        - Albert Enstein
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
Url : /pipermail/mlug-listserv.mlug.ca/attachments/20080716/fb57235d/attachment.pgp