arrow_upward

Thread Rating:
  • 0 Vote(s) - 0 Average
  • 5
  • 4
  • 3
  • 2
  • 1
Serious VestaCP script security breach
#3
(04-10-2018, 09:41 AM)sagher Wrote: As you written that you are a good user of VestaCP. can you please tell me why VestaCP is not shown exact B/W usage and CPU usage?

lol @sagher  I didn't say I was a good user - I said I was an enthusiastic user.  Big difference.  Tongue

Usually when I have a VPS it comes with a control panel from the VPS host, so I take my reading about CPU use from the VPS host.  I don't need a panel to duplicate those functions.

I use VestaCP along very minimalist lines. I don't use its e-mail or ftp system.  I only use the basic services like DNS, adding domains and databases mysql and phpmyadmin and fail2ban. For e-mail I use free Zoho.   VestaCP because of Nginx takes up minimal space and is very fast.  You can easily run it on 512MB RAM VPS. 

If CPU use is very important to you so that you want another panel to break it down for you then a Control Panel like WebMin or VirtualMin would be much better for you.  Most Admin Geeks swear by their Web or VirtualMin and frown on VestaCP.  But those panels use much more resources.  You'll need more than 512MB RAM to use them comfortably.  I tried WebMin once and it dragged on me with 512MB RAM.  So that's the reason I'm using VestaCP mostly because of how light it is.  And how little of it I have to use.  I only load the portions in the installation script that I need and use. The installation script of VestaCP is super - as you can generate the command from the VestaCP installation Web page and specify exactly what you want on your VPS and exlude that which you don't want.   I don't have anything unnecessary on my VestaCP.  However, a few weeks ago I spoilt myself.  I added paid Softaculous with VestaCP that has all of the Softaculous scripts.  I don't think anyone else needs that, but I find it easy and fun to try out those scripts.  So that's what I mean by enthusiastic user.  I'm not prescribing it to anyone else.  Every one needs to figure out what they need in a control panel and go for the one that best meets those needs.

Update about the Security Breach at VestaCP - looks as though the Admin and developers are happy they've sorted out the issues and have given the script their seal of approval. I'm still cautious however and may wait a while before I'll use the script for a new VPS. My current VPSs are OK though, I think probably because of not using the e-mail system. I think e-mail systems in most Control Panels are a huge risk factor. Like most hackers aim for those in order to use them to DDoS third party servers. I rather use a third party mail host like Zoho, where one can use one's domain for the e-mail address. Looks good, and if one only has 25 accounts one can have it free with Zoho too. There are of course many other e-mail hosts too, that could be better. I know Zoho though and am happy with them.
Terminal
Thank you to Post4VPS and VirMach for my awesome VPS 9!  


Messages In This Thread
RE: Serious VestaCP script security breach - by deanhills - 04-10-2018, 12:40 PM


person_pin_circle Users browsing this thread:
Sponsors: VirMach - Host4Fun - CubeData - Evolution-Host - HostDare - Hyper Expert - Shadow Hosting - Bladenode - Hostlease - RackNerd - ReadyDedis - Limitless Hosting