OVHcloud Web Hosting Status

Current status
Legend
  • Operational
  • Degraded performance
  • Partial Outage
  • Major Outage
  • Under maintenance
FS#10113 — hubiC availability
Scheduled Maintenance Report for Web Cloud
Completed
The hubic/pcs storage system is currently impaired.

Related incident: http://status.ovh.co.uk/?do=details&id=6207

Update(s):

Date: 2014-01-31 12:11:02 UTC
On reinstating the service, we found a cache management bug.
This bug allowed 74 logins (mainly OVH monitoring robots that
make internal checks on internal login links) to see the file
list of another login. The bug was detected immediately and
we cleared the cache 20 to 30 seconds after relaunching the
service. The bug was identified within 15 minutes and fixed
20 minutes later.

We have analysed the access logs to determine who was able to
read what in the 30 seconds between relaunching the service
and deleting the cache. Only the file list on one directory
was viewed by 7 logins, and the account info for 2 logins.
No file content was read or modified.

We were able to identify this bug so quickly thanks to the
security tools set up on hubiC from the outset.
These tools enable us analyse \"normal\" and \"unusual\" activity
on an account. This system currently flags up issues internally.
We will soon be adding a double authentication process in case
of such issues arising again.


Date: 2014-01-29 15:29:10 UTC
The service is fully available again.
Posted Jan 29, 2014 - 15:28 UTC