this post was submitted on 19 Feb 2025
102 points (100.0% liked)
BuyFromEU
3287 readers
29 users here now
Welcome to BuyFromEU - A community dedicated to supporting European-made goods and services!
We also invite you to subscribe to:
Logo generated with mistral le chat Banner by Christian Lue on unsplash.com
founded 1 month ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I think none of us have to worry about privacy on hetzner too much - we're simply not that interesting.
Having said that, ideologically I cannot use them due to them facilitating a MitM attack. Not sure if this is the original, but if you're curious about the low level detail - you can read through it here.
Fair point.
I also don't like that NextCloud is implemented in PHP but at least it is widely used and gets some attention.
As much as I dislike php - nextcloud seems to be developed in a decent way. Been running a personal publicly exposed instance for 7 years now - no security concerns so far.
About the mitm. I couldn't find in the text a report of how the mitm attack was done. How was the network reconfigured. If Russia got the password for example and used that hetzner and linode aren't at fault.
It's there. Hetzner helped with issuing a lets encrypt cert for the mitm proxy. The only reason they got caught was because they forgot to renew it. So while the real owner had all certs in order, the mitm proxy was serving an expired one.