Hacker News Reader

Although, I did notice that my installation came setup using Google's free public DNS servers (8.8.8.8, 8.8.4.4) -- curious that digital ocean isn't running their own DNS servers. If google has an outage, thats a lot of customers who will be complaining to Digital Ocean when they have 0 control over it.

View on HN

I can confirm it is still displaying sensitive information.

Have you raised this with digital ocean? That should be your first port of call before you go blurting it out on the internet.

As per guidelines of responsible disclosure, I contacted digitaloceans a good 10 hours before going public. I also contacted them again -before- going public, telling them I would do so, and why.

I feel I have done my best to ensure this does not harm them in any way, while making sure customers are protected.

I also want to point out that this entry was truncated. My full disclosure is, suitably, on full disclosure (the list). There, I explain that I consider DO one of the best cloud shops out there, and I will happily continue using them. I am not an angry customer. I am a current customer, but this is still information that people should be aware of, I believe. Anwyay, do with it as you please. Digital Ocean are aware of it and on top of it (I believe). I wanted to give customers the same chance.

Reply on news.ycombinator.com