+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 22
Bad Experiences Thread, Fasthosts in Purchasing and Trading; Anyone suffered any ill-affects of Fasthost's recently security scare? I tried to log on to an FTP site this morning ...
  1. #1

    Join Date
    Sep 2007
    Posts
    181
    Thank Post
    4
    Thanked 2 Times in 2 Posts
    Rep Power
    15

    Fasthosts

    Anyone suffered any ill-affects of Fasthost's recently security scare?

    I tried to log on to an FTP site this morning to find my password being rejected. Apparently they have reset a lot of their customers passwords because someone has recently hacked into their system and obtained customer account details.
    Last edited by AnnDroyd; 2nd May 2008 at 02:56 PM.

  2. #2

    tech_guy's Avatar
    Join Date
    May 2007
    Location
    That little bit in the middle of Little Old England
    Posts
    8,162
    Thank Post
    1,924
    Thanked 1,358 Times in 748 Posts
    Blog Entries
    3
    Rep Power
    400

    Re: Fasthosts

    Yeah, I had the email from them this morning - apparently some of the accounts have been compromised and whoever did the hack has been ftping into sites and changing stuff....

    "Dear Customer, We wrote to you on 18th October 2007 advising that you change all of the passwords on your Fasthosts accounts (including control panel, FTP, database and email), in order to prevent any unauthorised account access following the network intrusion we previously communicated. Whilst we have found the vulnerability that caused this issue, and have instigated a system wide security audit to improve and enhance our current security, we also advised you to change your control panel, FTP and email passwords as a precaution. Today we have been made aware that a small number of our customers who did not change their passwords have experienced a compromise to their FTP space. As a result, in order to totally protect all of our customers, we have today implemented an automatic password change for every control panel, FTP or SQL password that was not previously reset. In 10 days time we will also reset all unchanged email passwords. To ensure complete security when communicating your new passwords to you, we will first take the stringent measure of sending the new control panel password via Royal Mail. Once you have received your new control panel password, you will then be able to go into your control panel and immediately change your FTP, SQL and email passwords. Please note that the email password reminder system will not work from the time you receive this mail, to the time you log in with your new control panel password. If you have already changed your control panel password, you will still need to go into your control panel and change ALL the FTP, SQL and email passwords associated with your accounts that haven’t already been changed. UNDER NO CIRCUMSTANCES WHATSOEVER SHOULD YOU TRY TO REUSE ANY OF YOUR OLD PASSWORDS We apologise for the inconvenience that this will cause you during this period, but trust you understand that our primary concern is for our customers and for the security of their websites and data. Unfortunately, an automatic password change is the only way of ensuring that all of our customers are totally secure. If you have any questions relating to this, please contact our Customer Support team on 0870 888 3600 or customersupport@fasthosts.co.uk, and they will be more than happy to help you. Thank you once again for your understanding and cooperation in this matter.Yours sincerely, The Fasthosts Team"

  3. #3


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,715
    Thank Post
    288
    Thanked 789 Times in 616 Posts
    Rep Power
    226

    Re: Fasthosts

    What's even more annoying is that it took them about 8 days after the Register broke the story* (and the comments section was enlightening about their questionable security practices) to email me about the breach.

    So yeah, between that and the continued poor performance and support, we don't use them anymore.

    * http://www.theregister.co.uk/2007/10...investigation/

    http://www.theregister.co.uk/2007/10..._banking_hack/

  4. #4
    ninjabeaver's Avatar
    Join Date
    Jun 2005
    Location
    Norfolk
    Posts
    1,090
    Thank Post
    183
    Thanked 100 Times in 88 Posts
    Rep Power
    47

    Re: Fasthosts

    Same here. I've moved all my accounts over to 123reg. I hope they are better. I was even more annoyed at how they automatically took £6 odd for renewal fees 30 days before expiration of the domain, without even telling me.

    They told me they had sent numerous emails about it, none of which I got, but the invoice for £6 came through fine.

    Never going to use them again. From what I have also read on the net, many people are doing the same.

  5. #5

    Join Date
    Sep 2005
    Location
    Leicester, UK
    Posts
    123
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Fasthosts

    well speaking of website security when i worked at longslade community college the embc or someone similar hosted their websites and the username and password for FTP was something like "siteID" "tuesday" then you got logged into the folder /siteID/ out of interest i went up a folder and could happily download/remove the websites of over 150 schools (i obviously didnt) but was shocked about the lack of permission based security.

    Not surprising though as we all know these consortiums are ran by cowboys.
    matt

  6. #6

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    10,053
    Thank Post
    3,583
    Thanked 1,123 Times in 1,025 Posts
    Rep Power
    377

    Re: Fasthosts

    Just out of pure curiousty who would you recomend over fasthosts ?

  7. #7

    Join Date
    Sep 2005
    Location
    Leicester, UK
    Posts
    123
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Fasthosts

    dreamhosts have been good for me but not for everyone.
    I have also used servage.net in the past and they were ok although the databases seem to run a bit slow at times.

    Thanks
    Matt

  8. #8
    Rozzer's Avatar
    Join Date
    Aug 2005
    Location
    South West
    Posts
    720
    Thank Post
    21
    Thanked 81 Times in 61 Posts
    Rep Power
    34

    Re: Fasthosts

    I have been with fasthost for 1 year and i found them to be pretty poor. I had a billing issue where i had a new debit card issued and did not think to update there billing records. So the pay did not go through so they wanted to charge me 30 pounds for it. So i just closed my account and went with dreamhosts which are cheap and cheerful

    Ross

  9. #9

    tech_guy's Avatar
    Join Date
    May 2007
    Location
    That little bit in the middle of Little Old England
    Posts
    8,162
    Thank Post
    1,924
    Thanked 1,358 Times in 748 Posts
    Blog Entries
    3
    Rep Power
    400

    Re: Fasthosts

    I'm with FastHosts and touch wood have not had any issues (apart from their security breach the numbnuts). Have you heard the horror stories about 1and1?

  10. #10

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,440
    Thank Post
    701
    Thanked 2,302 Times in 1,063 Posts
    Blog Entries
    23
    Rep Power
    678

    Re: Fasthosts

    EduGeek is hosted on a Fasthosts server. When the security breach came t light I spent an awful evening alerting all the site admins and changing passwords ad-nausium. Needless to say the service we have received in the past year has really not been up to scratch and better hosting will be sought next year after our contract is up (I've paid for the year). Hopefully a nice company will allow us to live on their server farm if we purchase our own server.

  11. #11

    webman's Avatar
    Join Date
    Nov 2005
    Location
    North East England
    Posts
    8,422
    Thank Post
    645
    Thanked 967 Times in 667 Posts
    Blog Entries
    2
    Rep Power
    328

    Re: Fasthosts

    Hmmm... - weird? :P

  12. #12


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,715
    Thank Post
    288
    Thanked 789 Times in 616 Posts
    Rep Power
    226

    Re: Fasthosts

    @ Intrigue
    Last time I bothered to check, that hadn't changed. Trusting county to care about securing your data (export of pupil data via ftp, anyone?) is asking for trouble.

    We're currently using www.positive-internet.com and in the 28 days trial period still. So far they haven't sucked, and the guys we quizzed on the phone before committing to a trial knew what he was talking about _and_ knew about Moodle. It's too early to tell whether we'll continue with them as "better than fasthosts" isn't really hard to achieve.

    For personal websites, I've used www.purplecloud.net for nearly 4 years and they're brilliant but (last time I checked with them) they don't reccommend themselves for business websites.

    @Webman
    Surely "...poor service, we reccommend $foo instead?"

  13. #13
    Butuz's Avatar
    Join Date
    Feb 2007
    Location
    Wales, UK
    Posts
    1,579
    Thank Post
    211
    Thanked 220 Times in 176 Posts
    Rep Power
    63

    Re: Fasthosts

    Fasthosts are RRRRRRRRubbish with a capital R.

    Used to have a reseller account years ago with them, but had to drop them after they repeatedly emailed the account admin password to me in clear text despite me never even requesting it.

    Useless. And if they have had further security breaches since then, it doesnt suprise me. I think someone need to pop in and actualy explain to them what security means?

    Butuz

  14. #14
    ChrisP's Avatar
    Join Date
    Apr 2007
    Location
    norfolk
    Posts
    150
    Thank Post
    4
    Thanked 8 Times in 8 Posts
    Rep Power
    17

    Re: Fasthosts

    i've now noticed somthing that i'm not too hapy with about fasthosts

    i have used them for years. and i use catchall mail forwarding so i can use throwaway email addresses eg: qwerty@website.com, asdf@website.com 12345@@website.com etc.

    However i'm now getting loads of junk mail sent to different addresses I used ONLY ONCE from years ago. So it poses the interesting question of how those addresses got out.

    Either Fasthosts has been hacked before or more likley, someone within Fasthosts is selling email addresses.

  15. #15

    tech_guy's Avatar
    Join Date
    May 2007
    Location
    That little bit in the middle of Little Old England
    Posts
    8,162
    Thank Post
    1,924
    Thanked 1,358 Times in 748 Posts
    Blog Entries
    3
    Rep Power
    400

    Re: Fasthosts

    @ChrisP That's an interesting observation as I have FastHosts email and I get spam in accounts where I have never ever used or given out the email address.



SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Any fasthosts customers noticed slow Linux hosting?
    By pete in forum Wireless Networks
    Replies: 3
    Last Post: 12th July 2007, 03:05 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •