Share

Question

Hi, everybody!
DO is using awesome https://www.statuspage.io at status page: https://status.digitalocean.com
Is it safe? I mean this is external site and if I’m signed in into DO account, is this site can get my auth/session cookies?

Answer 1

sailer403 February 6, 2018

Yes, StatusPage is used by hundreds of known websites (Even Reddit.com uses them: https://reddit.statuspage.io/)

Reply Report

fannig February 6, 2018

But if they get my session cookies (because of sub-domain) a hacker attack (or insider attack) can be possible.
Reply Report
- jonleibowitz February 6, 2018
  
  If you can demonstrate a vulnerability, please contact DigitalOcean’s security team with your findings.
  
  Reply Report

Answer 2

fannig February 6, 2018

But if they get my session cookies (because of sub-domain) a hacker attack (or insider attack) can be possible.
Reply Report
- jonleibowitz February 6, 2018
  
  If you can demonstrate a vulnerability, please contact DigitalOcean’s security team with your findings.
  
  Reply Report

Related

Question

Powered by Statuspage - is it safe?

Leave a comment

Looking for something else?

Share

Share your Question

Related

Question

Powered by Statuspage - is it safe?

Leave a comment

Related

question

ISIS hack on my server / droplet

question

Game Server DDoS Attack??

question

How do I put my SSH key on my droplet? (Publickey,password in particular)

question

"freebsd-update install" command fails on FreeBSD 10.1-RELEASE

Looking for something else?

Almost there!