Self Hosted - Self-hosting your services.

11699 readers

1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules

No harassment
crossposts from c/Open Source & c/docker & related may be allowed, depending on context
Video Promoting is allowed if is within the topic.
No spamming.
Stay friendly.
Follow the lemmy.ml instance rules.
Tag your post. (Read under)

Important

Beginning of January 1st 2024 this rule WILL be enforced. Posts that are not tagged will be warned and if not fixed within 24h then removed!

Lemmy doesn't have tags yet, so mark it with [Question], [Help], [Project], [Other], [Promoting] or other you may think is appropriate.

Cross-posting

[email protected] is allowed!
[email protected] is allowed!
[email protected] is allowed!
[email protected] is allowed if topic has to do with selfhosting.
[email protected] is allowed!

If you see a rule-breaker please DM the mods!

founded 3 years ago

MODERATORS

[email protected]

How private is a vps? (lemmy.ml)

submitted 1 week ago by [email protected] to c/[email protected]

32 comments fedilink hide all child comments

Can the vps provider not read everything on your server, unless it's explicitly encrypted?

I'm asking because I'm interested in self-hosting mainly as a way to get privacy respecting services where good hosted ones don't exist. I'm not sure I really want to deal with running my own hardware

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 5 points 6 days ago (1 children)

there is no provider on the planet that can freeze state of RAM in a way that would be useful for this

You are very mistaken, this is a well-supported feature in most modern virtualization environments.

Here are XenServer docs for it. And here is VMWare's "high-frequency" snapshots page.

Sometimes, law enforcement authorities only need to contact cloud provider A when they have a warrant for (or, perhaps, no warrant but a mere request for) data about some user C who is indirectly using A via some cloud-hosted online service B.

A(mazon) will dutifully deliver to the authorities snapshots of all of B's VMs, and then it is up to them if they limit themselves to looking for data about C... while the staff of company B can honestly say they have not received any requests from law enforcement. (sorry my best source on this at the moment is sadly trust me bro; I've heard from an AWS employee that the above scenario really actually does happen.)

[–] [email protected] -2 points 6 days ago (1 children)

I'm not talking about snapshots. I'm talking about viewing the RAM of a running instance and having that be useful for anyone who managed to get it. And let me give you two simple reasons why it's not going to be useful:

Encryption extensions at the CPU
Hypervisor resource evictions

Unless you were to go and be on that instance at the exact moment something was happening (or shortly thereafter), that memory is going to be useless.

Now, if someone were absolutely stupid, disabled CPU security extensions at the Hypervisor, AND did something like make a RAM disk and stored something on that-which is really just going out your way to leave a trail-then yeah, maybe you'd get something.

The default of every hosting provider I'm familiar with is encryption by default on absolutely everything from the Hypervisor up except the disk, so I'm seriously doubting the claim of OP unless there is otherwise non-TMB information.

Disk snapshots are another story if unencrypted.

[–] [email protected] 3 points 6 days ago

Here's a snapshot of the memory of a running live cd of Ubuntu. I ran a script to load 0123456789abcdef over and over and it's clearly readable. Nothing special is required for this, as the Hypervisor has access to anything that the VM does. If the VM loads the encryption key for your disk into memory it will be available to the provider.