this post was submitted on 19 Feb 2025
94 points (100.0% liked)
BuyFromEU
558 readers
585 users here now
Welcome to BuyFromEU - A community dedicated to supporting European-made goods and services! Whether you’re looking for locally produced fashion, technology, food or services, this is the place to share, discover and promote businesses that contribute to a stronger European market. Rules: 1. Stay on topic 2. No Self-Promotion or Spam 3. Be Respectful & Civil 4. No Counterfeit or Non-European Products 5. No Politics or Nationalism 6. No NSFW 7. Moderator Discretion Applies
founded 2 days ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I think none of us have to worry about privacy on hetzner too much - we're simply not that interesting.
Having said that, ideologically I cannot use them due to them facilitating a MitM attack. Not sure if this is the original, but if you're curious about the low level detail - you can read through it here.
About the mitm. I couldn't find in the text a report of how the mitm attack was done. How was the network reconfigured. If Russia got the password for example and used that hetzner and linode aren't at fault.
It's there. Hetzner helped with issuing a lets encrypt cert for the mitm proxy. The only reason they got caught was because they forgot to renew it. So while the real owner had all certs in order, the mitm proxy was serving an expired one.
Fair point.
I also don't like that NextCloud is implemented in PHP but at least it is widely used and gets some attention.
As much as I dislike php - nextcloud seems to be developed in a decent way. Been running a personal publicly exposed instance for 7 years now - no security concerns so far.