undefined | Better HN

0 pointsceejayoz1mo ago0 comments

But shouldn't that be disclosed to Railway, and not the public? If they had someone running a botnet on compromised accounts there, for example.

If Railway isn't satisfied with the explanation, they're able to say so publicly, yes?

0 comments

3 comments · 1 top-level

r_lee1mo ago· 2 in thread

if it wasn't something specific to their setup, it should be disclosed publicly, because this is a catastrophic incident that makes you think it could happen to you as well, and there's no way to know what could trigger it

ceejayozOP1mo ago

> if it wasn't something specific to their setup

They're a web host; it could be any number of plausible mundane things that triggered automated action. This is a big recurring problem for any shared hosting provider.

r_lee1mo ago

a huge account like theirs should not be subject to automated actions like that.

an entire gcp project deleted along with its persistent disks.

how does that make any sense? nobody thought to call them or anything

1 more reply

j / k navigate · click thread line to collapse