Vesta Control Panel - Forum

Falzo , stop the insults. We have all said in this thread. More information you can find here https://www.welivesecurity.com/2018/10/18/new-linux-chachaddos-malware-distributed-servers-vestacp-installed/ In the next time I'll give you a warning. Excuse me, I don't think there were any insults from ...

Thank you for the explanation, it explains pretty much most of the things. Glad the project is not dead. A suggestion for future: aim for total transparency, update users more, use HTTPS on the repository and config servers, make r.vestacp.com and c.vestacp.com browsable so users could see when cert...

I now start to think that the security hole that came up back in April could've been made intentionaly too. I've also checked this fork https://github.com/madeITBelgium/vesta and it seems promising, as it is updated nearly every day and does not use the repositories of Vesta. I'm going to switch to ...

This just proves that it is the time to move on, VestaCP was great, but we just can't trust it anymore. As a developer for most of my life I can state that there is literally NO reason to EVER send a password somewhere, encrypted or not.

It is either dead or the team itself is responsible for stealing passwords and hacking into servers. There is not other explanation.

That indeed could be an option I still like VestaCP, it is really sad this is happening. I did upgrade manually to the fork by MadeITBelgium and restricted the port using iptables, so far so good. The fork seems to be clean and well maintained. Currently looking into to a way of making transitiong r...

This seems like some dirty stuff. I basically see three options 1. We get an explanation from the developers (considering how inactive they are, highly unlikely) 2. We all move away from VestaCP as for now it is just an insecure pile of .... 3. Move to VestaCP fork by MadeITBelgium (google it) it ha...

VestaCP doesn't have this feature and probably will never have. It's very annoying business practice by the way. Since VestaCP is hosting panel, it gives the user full control on what's on his site and it's impossible to add anything by yourself he a user can't remove.

A little bit more information. The retention script, once again is corrupt. The 17th version did leave one less backup, the 18th one too much. Here is a fix
https://github.com/serghey-rodin/vesta/ ... b4eea26373

v-backup-user