[Discuss] why don't web hosts scan their sites?

2013-11-18 Thread Eric Chadbourne
Hi All, Over the weekend I fixed a small local business web site that had been hacked. Same old story, they were using a popular cms, didn't update it and and old javascript library was compromised. It was done by this ass anonboy: https://www.google.com/search?q=hacked+by+anonboy A scan with c

Re: [Discuss] why don't web hosts scan their sites?

2013-11-18 Thread Richard Pieri
Eric Chadbourne wrote: situation. Why don't these guys scan their own servers? I bet You already provided the straight answer, so do you want the snarky answer or the really snarky answer? -- Rich P. ___ Discuss mailing list Discuss@blu.org http:

Re: [Discuss] why don't web hosts scan their sites?

2013-11-18 Thread Eric Chadbourne
The really snarky answer! A chuckle will brighten the day. Though I didn't realize I already provided the answer. On Mon, Nov 18, 2013 at 11:39 AM, Richard Pieri wrote: > Eric Chadbourne wrote: >> >> situation. Why don't these guys scan their own servers? I bet > > > You already provided the

Re: [Discuss] why don't web hosts scan their sites?

2013-11-18 Thread Richard Pieri
Eric Chadbourne wrote: Though I didn't realize I already provided the answer. You did: It seems every low level "web developer" is giving clients wordpress, drupal, and other cms solutions without providing support after installation and then the client gets owned. I'm having difficulty comi

Re: [Discuss] why don't web hosts scan their sites?

2013-11-18 Thread Richard Pieri
As a more serious take on the topic, hosting providers are -- or are supposed to be -- common carriers. They can't scan users' content. If they did that then they'd cease being common carriers and they'd lose their safe harbor and Good Samaritan protections. -- Rich P.

Re: [Discuss] why don't web hosts scan their sites?

2013-11-18 Thread Eric Chadbourne
Their servers are serving malware. A lot of it I bet. I also bet in their user agreement says you can't do that. Couldn't they use this as a reason? They would be doing us all a favor. On Mon, Nov 18, 2013 at 1:35 PM, Richard Pieri wrote: > As a more serious take on the topic, hosting provide

Re: [Discuss] why don't web hosts scan their sites?

2013-11-18 Thread Richard Pieri
Eric Chadbourne wrote: Their servers are serving malware. A lot of it I bet. I also bet in their user agreement says you can't do that. Couldn't they use this as a reason? They would be doing us all a favor. In principle, a common carrier cannot police the content or goods it carries. A co

Re: [Discuss] why don't web hosts scan their sites?

2013-11-18 Thread William Cattey
It sounds like a job for a "Best Practices" document that cloud service providers should hand out with the rest of their documentation that makes it easy for the customers to do the right thing. -Bill On Nov 18, 2013, at 2:17 PM, Richard Pieri wrote: > Eric Chadbourne wrote: >> Their servers

Re: [Discuss] why don't web hosts scan their sites?

2013-11-18 Thread Ben Eisenbraun
On Mon, Nov 18, 2013 at 04:17:19PM -0500, William Cattey wrote: > It sounds like a job for a "Best Practices" document that cloud > service providers should hand out with the rest of their documentation > that makes it easy for the customers to do the right thing. On the contrary, it sounds like a

Re: [Discuss] why don't web hosts scan their sites?

2013-11-18 Thread Richard Pieri
Ben Eisenbraun wrote: On the contrary, it sounds like a value-added service now available for only $5.99/month! Sign up now and enjoy 12 months for the price of 11! This. Why give something away when you can charge a subscription fee? Thing is, if a customer signs a contract permitting the pro

Re: [Discuss] why don't web hosts scan their sites?

2013-11-18 Thread MBR
On 11/18/2013 1:35 PM, Richard Pieri wrote: As a more serious take on the topic, hosting providers are -- or are supposed to be -- common carriers. They can't scan users' content. If they did that then they'd cease being common carriers and they'd lose their safe harbor and Good Samaritan prote

Re: [Discuss] why don't web hosts scan their sites?

2013-11-19 Thread Richard Pieri
MBR wrote: So, since service providers can now remove material they consider offensive without subjecting themselves to liability, there's no reason they couldn't scan users' content for malware without subjecting themselves to liability. That's not how it works. Among the provisions of the CDA