OVH est officiellement en cours de qualification pour son offre Private Cloud. Cette première étape formelle dans le projet de qualification est l’occasion de faire un point sur le dispositif mis en place pour aligner son offre avec les exigences élevées du référentiel SecNumCloud dans l’objectif de fournir un cloud de confiance reconnu comme tel par l’ANSSI. La confiance de nos clients et des clients de nos clients est au cœur de nos préoccupations. L’expertise technique et le professionnalisme de nos équipes sont la base d’une sécurité pragmatique et efficace. C’est sur celle-ci que nous construisons, chaque jour, la confiance (...)
Blog Posts
In our previous articles, we took at the the operational and technicals constraints of the migration project at our Paris datacentre. If you have not been following everything related to these constraints, I’d suggest you read the article on the infrastructure of our web hosting. We built our migration scenarios with these constraints in mind. To overcome this high-risk project, we have considered several scenarios, each with their own set of operational difficulties and risks. Let’s take some time to look at the migration projects we studied, and then explain how we selected the best one. Scenarios Our main concern (...)
Dans les articles précédents, nous avons vu quelles sont les contraintes opérationnelles et techniques du projet de migration de notre datacentre de Paris. Si vous n’avez pas tout suivi sur nos contraintes techniques, je vous invite à relire l’article présentant l’infrastructure de nos hébergements web. Nous avons bâti nos scénarios de migration en prenant fortement en compte ces contraintes. Pour venir à bout de ce projet à haut risque, nous avons envisagé plusieurs scénarios. Chacun comportant leur lot de difficultés et de risques opérationnels. Prenons le temps de voir quels projets de migration ont été étudiés, avant d’expliquer comment nous (...)
Last month, OVH and Binder team partnered together in order to support the growth of the BinderHub ecosystem around the world. With approximately 100,000 weekly users of the mybinder.org public deployment and 3,000 unique git repositories hosting Binder badges, the need for more resources and computing time was felt. Today, we are thrilled to announce that OVH is now part of the world-wide federation of BinderHubs powering mybinder.org. All traffic to mybinder.org is now split between two BinderHubs – one run by the Binder team, and another run on OVH infrastructure. So for those who don’t already know mybinder.org, here’s (...)
On June 18th 2019 at 7pm CEST, 4 vulnerabilities have been disclosed affecting the TCP stack of the Linux kernel. These vulnerabilities relies on an integer overflow in the Linux kernel which can lead to a kernel panic on one hand, and on an algorithmic complexity in the SACK implementation leading to CPU resource exhaustion on the other hand. In both cases, the impact is limited to the service availability. Who is vulnerable ? All Linux Oses running a kernel 2.6.29 and above (from March 2009) FreeBSD 12 using the RACK TCP stack. Note that fortunately, this is not the default (...)
On June 11th, security researchers published a paper titled “RAMBleed Reading Bits in Memory without Accessing Them”. This paper describes vector against Dynamic Random Access Memory (DRAM) modules that are already susceptible toRowhammer-style attacks. Systems using DRAM modules mitigated against Rowhammer style attacks remain protected from RAMBleed. This vector may affects hardware products, among which some used by OVH. This vulnerability has been referenced as: · CVE-2019-0174 According to the researchers, “RAMBleed’s rate of reading memory is modest, toping at around 3–4 bits per second. This allows sufficient time for memory scrubbing countermeasures to remove shortlived secret data from the target’s memory.“ At this point (...)