On: Compromised Linode, thousands of BitCoins stolen

[nirvdrum]

Amazon getting a PCI compliance pass was a big deal. The last time I looked, you needed to be able to ensure secure access to the facility, enumerate who has physical access to the hardware and when, and things of that effect. And you need to be able prove all that in the event you're ever compromised.

[dfc → nirvdrum]

Securing physical access is a requirement for anyone wishing to obtain pci compliance.

[ceejayoz → nirvdrum]

> The last time I looked, you needed to be able to ensure secure access to the facility, enumerate who has physical access to the hardware and when, and things of that effect. And you need to be able prove all that in the event you're ever compromised.

None of that should be particularly difficult for a VPS provider as large as Linode.

[epochwolf → ceejayoz]

> you needed to be able to ensure secure access to the facility

This part isn't doable if you don't own the datacenter. Slicehost has a problem with this because they never owned the datacenters they used.

[orofino → epochwolf]

You don't need to own the datacenter, but you do need your own, secured space in a datacenter.