Bunny used Gcore in Armenia. Gcore themselves got hacked, not Bunny. Bunny was just an affected downstream, in only one of their POPs.
https://lowendtalk.com/discussion/222315/gcore-compromised-v...
The title is heavily misleading.
https://lowendtalk.com/discussion/222315/gcore-compromised-v...
The title is heavily misleading.
NGL it's the exact wording I'd personally like to see from a product that had an infra provider have an incident just so that I can mentally tune in enough to figure out if I need to care.
Bunny is doing the right thing here and owning it.
I'm unsure, but I have to ask: isn't this company Russian-controlled (with Luxembourg and Cyprus shell-company fronts)? Their Wikipedia entry[0] features a controversy involving RT (Russia Today); and a number of their top employees (i.e. Vsevolod Vayner) seem to live in Russian cities; and Moscow was their 2nd cloud location, after Luxembourg[1].
I'm not sure if I've got this right (most of the primary sources are Russian websites that block me and also block Western internet archives; I'm gleaning some things from Google preview caches). But: is it possible the #1 "European sovereign CDN" has been acting as a white-label reseller for Moscow? Is it possible they willingly trusted all of their customers' TLS certificates to a contractor operating from Russia?
Someone kindly fact-check me.
[0] https://en.wikipedia.org/wiki/Gcore#Controversies
[1] https://web.archive.org/web/20260420215140/https://www.strea...
> "An employee appears to be offering Medvedev access to intelligence information" [...] "This recording shows Michael Shurygin, then-head of GCore Russia, apparently discussing plans with former Russian President Dmitry Medvedev in April 2021."
> [...] "The group laughs. Shurygin had made a pun that only works in Russian: “Introduced”—that is, внедрять (vnedryat’)—is ambiguous. It can also be understood to mean “to penetrate” or “to infiltrate.” So they would have infiltrated Luxembourg. Medvedev says, “I hope on behalf of the state.” And they laugh again."
https://correctiv.org/aktuelles/russland-ukraine-2/2023/02/1...
Yes, they absolutely could help. They could take an order over the phone. They could choose a subcontractor who delivered good service to the restaurant's customers. The restaurant is 100% responsible.
If I used a subcontractor for a client, not in a million years would I tell the client, 'the subcontractor's failure isn't my problem; I can't control them'. I would look like a joke, entirely unreliable and clueless.