<![CDATA[i set up a new vps at some weird provider and they sent me an e-mail with my vps credentials]]>i set up a new vps at some weird provider and they sent me an e-mail with my vps credentials

the root password said N/A, so you'd think that there's no root password by default. BUT NO! THE ROOT PASSWORD IS LITERALLY "N/A"!! AND SSHD IS EXPOSED ON PUBLIC IPV4?? THE FUCK ??

]]>https://board.circlewithadot.net/topic/629a78b8-300e-49af-8a76-7d8022c09381/i-set-up-a-new-vps-at-some-weird-provider-and-they-sent-me-an-e-mail-with-my-vps-credentialsRSS for NodeFri, 15 May 2026 02:54:34 GMTSun, 03 May 2026 14:25:32 GMT60<![CDATA[Reply to i set up a new vps at some weird provider and they sent me an e-mail with my vps credentials on Sun, 03 May 2026 23:00:42 GMT]]>@stuartl yes

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/rebane2001/statuses/116513127946430587https://board.circlewithadot.net/post/https://infosec.exchange/users/rebane2001/statuses/116513127946430587Sun, 03 May 2026 23:00:42 GMT<![CDATA[Reply to i set up a new vps at some weird provider and they sent me an e-mail with my vps credentials on Sun, 03 May 2026 21:18:27 GMT]]>@rebane2001 my password is secret!

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/martenkoetsier/statuses/116512725912183231https://board.circlewithadot.net/post/https://mastodon.social/users/martenkoetsier/statuses/116512725912183231Sun, 03 May 2026 21:18:27 GMT<![CDATA[Reply to i set up a new vps at some weird provider and they sent me an e-mail with my vps credentials on Sun, 03 May 2026 20:30:24 GMT]]>@rebane2001 *maybe* it's a randomly generated 3 character password and you got (un)lucky? ...probably not

]]>https://board.circlewithadot.net/post/https://hachyderm.io/users/Kiuhbit/statuses/116512536944265299https://board.circlewithadot.net/post/https://hachyderm.io/users/Kiuhbit/statuses/116512536944265299Sun, 03 May 2026 20:30:24 GMT<![CDATA[Reply to i set up a new vps at some weird provider and they sent me an e-mail with my vps credentials on Sun, 03 May 2026 19:40:40 GMT]]>@rebane2001 Weird provider seems to be an understatement

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/grumpydad/statuses/116512341371407946https://board.circlewithadot.net/post/https://infosec.exchange/users/grumpydad/statuses/116512341371407946Sun, 03 May 2026 19:40:40 GMT<![CDATA[Reply to i set up a new vps at some weird provider and they sent me an e-mail with my vps credentials on Sun, 03 May 2026 18:26:53 GMT]]>@rebane2001 bruh

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/ham_sando/statuses/116512051256271919https://board.circlewithadot.net/post/https://mastodon.social/users/ham_sando/statuses/116512051256271919Sun, 03 May 2026 18:26:53 GMT<![CDATA[Reply to i set up a new vps at some weird provider and they sent me an e-mail with my vps credentials on Sun, 03 May 2026 18:19:02 GMT]]>@FritzAdalis @rebane2001 it's in several of Openwall's: https://www.openwall.com/wordlists/

  • English/3-large/acronym.lst
  • English/4-extra/acronym.lst
  • mangled.lst
  • all.lst
]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/draeath/statuses/116512020406730150https://board.circlewithadot.net/post/https://infosec.exchange/users/draeath/statuses/116512020406730150Sun, 03 May 2026 18:19:02 GMT<![CDATA[Reply to i set up a new vps at some weird provider and they sent me an e-mail with my vps credentials on Sun, 03 May 2026 16:28:03 GMT]]>@rebane2001
I wonder if N/A is in any of the common password lists.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/FritzAdalis/statuses/116511584025020679https://board.circlewithadot.net/post/https://infosec.exchange/users/FritzAdalis/statuses/116511584025020679Sun, 03 May 2026 16:28:03 GMT<![CDATA[Reply to i set up a new vps at some weird provider and they sent me an e-mail with my vps credentials on Sun, 03 May 2026 16:09:03 GMT]]>@rebane2001 thanks for contributing a server to the botnet, friend

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/BenjaminNelan/statuses/116511509271664171https://board.circlewithadot.net/post/https://mastodon.social/users/BenjaminNelan/statuses/116511509271664171Sun, 03 May 2026 16:09:03 GMT<![CDATA[Reply to i set up a new vps at some weird provider and they sent me an e-mail with my vps credentials on Sun, 03 May 2026 15:52:37 GMT]]>@rebane2001 I would switch the provider and request data deletion under article 17 GDPR 🫡

]]>https://board.circlewithadot.net/post/https://infosec.space/users/voxel/statuses/116511444643339937https://board.circlewithadot.net/post/https://infosec.space/users/voxel/statuses/116511444643339937Sun, 03 May 2026 15:52:37 GMT<![CDATA[Reply to i set up a new vps at some weird provider and they sent me an e-mail with my vps credentials on Sun, 03 May 2026 15:18:19 GMT]]>@rebane2001 I bet there was a provisioning error and the password was generated wrongly to be “N/A” and the script just went with it

]]>https://board.circlewithadot.net/post/https://haz.pink/users/can/statuses/116511309800842816https://board.circlewithadot.net/post/https://haz.pink/users/can/statuses/116511309800842816Sun, 03 May 2026 15:18:19 GMT<![CDATA[Reply to i set up a new vps at some weird provider and they sent me an e-mail with my vps credentials on Sun, 03 May 2026 14:45:46 GMT]]>@rebane2001 Oh that's a new one to add to my list of hilarious misconfiguration defaults like "null", " undefined" and "none".

]]>https://board.circlewithadot.net/post/https://defcon.social/users/varx/statuses/116511181772779120https://board.circlewithadot.net/post/https://defcon.social/users/varx/statuses/116511181772779120Sun, 03 May 2026 14:45:46 GMT<![CDATA[Reply to i set up a new vps at some weird provider and they sent me an e-mail with my vps credentials on Sun, 03 May 2026 14:44:06 GMT]]>@rebane2001 which provider? Asking for a ... friend

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/nyanbinary/statuses/116511175253235033https://board.circlewithadot.net/post/https://infosec.exchange/users/nyanbinary/statuses/116511175253235033Sun, 03 May 2026 14:44:06 GMT<![CDATA[Reply to i set up a new vps at some weird provider and they sent me an e-mail with my vps credentials on Sun, 03 May 2026 14:41:16 GMT]]>@rebane2001 This reminds me of a certain provider who used to have a pre-created user on the default Linux image with a password the same as the username. The user was in sudoers. This user account wasn't documented anywhere.

So even if you changed the root password, all systems set up with that image remained trivially exploitable over ssh.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/harrysintonen/statuses/116511164078169793https://board.circlewithadot.net/post/https://infosec.exchange/users/harrysintonen/statuses/116511164078169793Sun, 03 May 2026 14:41:16 GMT<![CDATA[Reply to i set up a new vps at some weird provider and they sent me an e-mail with my vps credentials on Sun, 03 May 2026 14:27:48 GMT]]>@rebane2001
Sketchy - very sketch

]]>https://board.circlewithadot.net/post/https://mastodon.wolkenheim.eu/users/Wolkensteine/statuses/116511111171459378https://board.circlewithadot.net/post/https://mastodon.wolkenheim.eu/users/Wolkensteine/statuses/116511111171459378Sun, 03 May 2026 14:27:48 GMT<![CDATA[Reply to i set up a new vps at some weird provider and they sent me an e-mail with my vps credentials on Sun, 03 May 2026 14:26:25 GMT]]>@rebane2001 that's concerning, wonder what their compromised host rates look like

]]>https://board.circlewithadot.net/post/https://tilde.zone/users/9pfs/statuses/116511105689165710https://board.circlewithadot.net/post/https://tilde.zone/users/9pfs/statuses/116511105689165710Sun, 03 May 2026 14:26:25 GMT