LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
LinkBack Search this Thread
Old 09-16-2007, 07:04 AM   #1
rblampain
Member
 
Registered: Aug 2004
Location: Western Australia
Distribution: Debian 7
Posts: 794

Rep: Reputation: 32
cheap hosting v hosting on my home machine


I am not sure of what to do.

I am planning to set up a site that will be hosted by an ISP, new members will join through this site but I want to keep the details of the members as safe as possible and we cannot afford an expensive set up at the beginning.

I thought there was 2 options:
1) have a separate account with an ISP to store the details of the members and the CGI routines required to process them
2) hold those details and CGI routines on a home machine to which "forms" would be submitted

In option 1, I wonder if I would have difficulties with the ISP if the routines involve (in their eyes) too much processing (these routines are written in pure assembly and are doing only basic validation, the testing shows that executing them in a loop of 65535 times takes only milliseconds on my AMD 1600MHz machine).
I also wonder how safe the data would be compared to solution 2.

In solution 2, the machine is powered by deep cycle, solar charged batteries and behind a "Smoothwall" firewall.

In solution 2, assuming the hardware set up is correct, there is only the risk of unpredictable damage through a badly set up firewall.

Having no experience in managing a site, I am hoping someone can provide practical hints and tips that would help me choose the least risky option.

For example, I have an account with ICDSoft ($60 per year) and I have had no problem whatsoever although I only use it as a remote backup of my main machine. I may have yet to discover their behavior when I start processing CGI routines on their $100 per year business plan.

Thank you for your help.

Last edited by rblampain; 09-16-2007 at 07:06 AM.
 
Old 09-17-2007, 05:34 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 26,539
Blog Entries: 51

Rep: Reputation: 2604Reputation: 2604Reputation: 2604Reputation: 2604Reputation: 2604Reputation: 2604Reputation: 2604Reputation: 2604Reputation: 2604Reputation: 2604Reputation: 2604
What's the data you're storing worth to others?
 
Old 09-20-2007, 01:33 AM   #3
rblampain
Member
 
Registered: Aug 2004
Location: Western Australia
Distribution: Debian 7
Posts: 794

Original Poster
Rep: Reputation: 32
As it is encrypted data related to the membership of a political organization, it could only be worth something to corrupt politicians (nearly all of them) who feel threatened.

Thank you for your answer.
 
Old 09-21-2007, 04:53 PM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 26,539
Blog Entries: 51

Rep: Reputation: 2604Reputation: 2604Reputation: 2604Reputation: 2604Reputation: 2604Reputation: 2604Reputation: 2604Reputation: 2604Reputation: 2604Reputation: 2604Reputation: 2604
Cheap hosting means shared hosting, right? Encryption/decryption means there'll be data and/or residue in memory. If you're concerned about (advanced methods of) snooping you wouldn't want it to be on a shared host where somebody has a *chance* of accessing it due to lack of process separation, misconfiguration, glitch or root rights. If that's not the case, then how does the encryption/decryption take place and what measures can you take to make the window of opportunity small(er)?
 
Old 09-22-2007, 12:11 AM   #5
rblampain
Member
 
Registered: Aug 2004
Location: Western Australia
Distribution: Debian 7
Posts: 794

Original Poster
Rep: Reputation: 32
Thank you for leading me through the logical steps for making a decision.

You are correct, it is shared hosting.

I should have specified the data would only be encrypted if I keep it on my local machine (encrypted raid disks). The hosting I got does not include encryption.

I can already see that the shared hosting involved may be more unsafe than storing the data on my local machine.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
where can i get cheap hosting? dave-ellis General 14 06-16-2010 07:21 AM
Looking for cheap and reliable hosting?? Greeta Grace General 3 06-16-2007 05:34 AM
cheap hosting hosler General 6 01-25-2006 06:41 PM
Cheap Web Hosting for LUG? AlexV General 4 07-26-2004 09:28 AM
Any cheap hosting companies?? amp2000 General 13 03-25-2003 07:38 PM


All times are GMT -5. The time now is 09:57 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration