Tim Berners-Lee was knighted in the Queen's New Year's Honours list. The BBC has a short story and biography.
Posted by mhp at 31 December 2003 in Around the Net | Print this Page
Sprint has sold its DellHost unit to Vericenter, DellHost customers were told Monday. DellHost is home to 21K active sites and 34K hostnames, housed on about 1,500 IP addresses.

Vericenter, a Houston-based provider of managed hosting and colocation, had been in discussions with Sprint in recent months about purchasing as many as four of the telecom company's surplus data centers. The company was launched in 2000 and is headed by Roger Ramsey, previously the CEO of Allied Waste Industries and a co-founder of Browning-Ferris Industries. Vericenter expanded into the Dallas market in 2001, and acquired the assets of Solid Systems in mid-2002.

Posted by Rich Miller at 22 December 2003 in Hosting | Print this Page
Sun Microsystems is phasing out Cobalt, the line of Linux-based hosting appliances it purchased for $2 billion at the height of the Internet boom. Sun has set an end-of-life date of Feb. 19 for its last remaining Cobalt product, the RaQ 550 server, but will continue to provide support and security updates for three years. The decision to discontinue Cobalt, announced Sept. 1, presents a challenge for numerous hosting companies that filled their racks with the distinctive blue server appliances.

The number of sites on Cobalt has declined since August 2002, when it reached its peak of 3.1 million hostnames and 942K active sites. Our November hosting survey found Linux-Cobalt serving 871K hostnames and 527K active sites.

cobalt_200312.PNG
Posted by Rich Miller at 19 December 2003 in Around the Net, Hosting | Print this Page
An affiliate of MCHost has trademarked the term "private label reseller plans" and is contacting hosting providers who use the phrase in their marketing.

The application by SeekAmerica Networks, an affiliate of MCHost, was approved by the U.S. Patent and Trademark office on Dec. 9, and provides SeekAmerica with protection for its use of the words "private label" in connection with reseller hosting plans. The approval is technically for a service mark, which offers trademark protection for a service rather than a product.

Posted by Rich Miller at 17 December 2003 in Hosting | Print this Page
The Planet, one of the fastest-growing hosting providers, said Tuesday that it will offer Red Hat Enterprise Linux to its hosting customers. The Dallas provider expects to deploy about 12,000 Linux-based servers for its customer base in the first year of the agreement, according to chief operating officer Lance Crosby.

The Planet's commitment comes as hosting providers with large Red Hat Linux installations are assessing their options following licensing changes at Red Hat, which will discontinue support and security updates for Red Hat Linux in April 2004. The company hopes to steer business customers to its Red Hat Enterprise Linux product, which requires a $349 a year support subscription fee per licensed copy.

Posted by Rich Miller at 17 December 2003 in Hosting | Print this Page
The web site outages continue at SCO, which was unreachable for much of the weekend and is currently experiencing its fourth incident of extended downtime since it came under a distributed denial of service (DDoS) attack last Thursday.
Outages continue for SCO web site

A dynamically updating graph is available here.

Posted by Rich Miller at 15 December 2003 in Performance, Performance, Security | Print this Page
EV1Servers has raised its prices for domains and SSL certificates, rolling back its cut-rate pricing of third-party offerings in a bid to acquire new hosting customers.

The dedicated server provider raised its domain name prices from $5 to $6.49 per year, and increased the cost of GeoTrust QuickSSL certificates from $25 to 49.95. It also hiked the price on ChainedSSL certificates from FreeSSL, which were introduced two weeks ago at $10 but now sell for $19.95. EV1Servers' dot-com domain pricing had been the lowest among major hosting providers, a distinction now held by 1&1 Internet at $5.99 a year. EV1Servers remains one of the lowest priced providers, but the move marks an uptick after months of declining prices for domains.

Posted by Rich Miller at 15 December 2003 in Hosting | Print this Page
Morris Miller joined Rackspace Managed Hosting in 1998 as chief operating officer, and now serves as Managing Director as well as co-chairman along with Graham Weston. Miller's primary focus is on corporate strategy, business development and M&A activity. He recently shared his thinking on key issue affecting Rackspace and the hosting industry.

Q: Rackspace considered going public prior to the downturn in the tech market. Is Rackspace still considering an IPO? What are the key factors for you in deciding whether and when to go public?

A: Fortunately, we are profitable and don't need to go public in order to fund our growth. Instead of focusing on an IPO, we concentrate on building our business for the long haul and creating the best hosting brand in the world. That said, an IPO is something we may consider in the future.

Posted by Rich Miller at 15 December 2003 in Hosting, Interviews | Print this Page
A data-based analysis of SCO's web site by the Cooperative Association for Internet Data Analysis (CAIDA) has found that this week's outage was related to a distributed denial of service attack (DDoS). Data collected by CAIDA's Network Telescope indicates that the sco.com site responded to more than 700 million attack packets over 32 hours, according to the analysis.

"Early in the attack, unknown perpetrators targeted SCO's web servers with a SYN flood of approximately 34,000 packets per second," CAIDA said. "Together www.sco.com and ftp.sco.com experienced a SYN flood of over 50,000 packets-per-second early Thursday morning."

SCO's statement attributing its outage to a DDoS attack had been widely questioned following a critique of the SCO press release at the Groklaw web site. CAIDA has previously used its technology to document Internet traffic events including the Code Red and Slammer worms.

SCO web site downtime

A dynamically updating graph is available here.

Posted by Rich Miller at 12 December 2003 in Performance, Security | Print this Page
A newly publicized bug in Internet Explorer shows that it is possible to craft html which causes Internet Explorer to display an incorrect URL in its address and status bars, making it easier for Internet fraudsters to trick web users into divulging critically important information such as their bank account details, while apparently interacting with a completely authentic URL.

The technique, which can be exploited by anyone with a rudimentary knowledge of HTML tags, is being demonstrated on several web sites. URLs with an '@' such as

http://www.visa.com:UserSession=2f6q9uuu88312264trzzz55884495&
usersoption=SecurityUpdate&StateLevel=GetFrom@61.252.126.191/verified_by_visa.html 
[the text to the left of the @ in a url is taken to be a user account on the sitename which follows] are commonly used by fraudsters launching electronic mail fraud attacks on customers of banks and credit card companies.

In the example Explorer serves a page from the local server, while displaying the url as www.microsoft.com.

Microsoft's immediate response is to recommend that people only enter sensitive information on SSL sites, after checking the certificate details.

Mozilla [both Windows and Linux versions] displays the url correctly.

Posted by Rich Miller at 12 December 2003 in Security | Print this Page
SCO said its web site has been knocked offline by a distributed denial of service attack (DDoS), and remains unavailable more than eight hours after the attack began. DDoS Takes SCO Site Down

A dynamically updating graph is available here.

The site has been down since 4:20 a.m. Mountain Time (11:20 am GMT) , when it experienced "a large scale distributed denial of service (DDoS) attack," SCO said in a statement. The attack affected the company's web site, e-mail, intranet and customer support operations. SCO said it is working with its Internet Service Provider to restore the site to operation.

SCO is working with law enforcement officials and its ISP to gather information to help identify the origin of these attacks. The company said the DDoS, known as a syn attack, used "several thousand servers (that) were compromised by an unknown person to overload SCO's Web site with illegitimate Web site requests."

The SCO site was offline for more than three days in August, and cited a DDoS for that outage as well.

Posted by Rich Miller at 10 December 2003 in Performance, Security | Print this Page
E-commerce providers that make customer data available to attack over the internet may find themselves open to enforcement actions by the U.S. Federal Trade Commission, which is stepping up its scrutiny of online retailers. In the most recent case, pet supply retailer PetCo disclosed that it is being investigated by the FTC after a security hole exposed 500,000 credit card numbers to the Internet.

The Petco case is at least the fourth instance in which the FTC has pursued enforcement actions against companies whose security and privacy practices fall short of assurances made to consumers. "Consumers have every right to expect that a business that says it's keeping personal information secure is doing exactly that," said Howard Beales, Director of the FTC's Bureau of Consumer Protection. "It's not just good business, it's the law."

Posted by Rich Miller at 10 December 2003 in Security | Print this Page
Oracle has issued an alert (PDF) detailing high risk security holes affecting all SSL products in the Oracle9i Application Server, the Oracle9i and Oracle8i Database Servers, and Oracle HTTP server. "Any client that is able to access the server may exploit the vulnerabilities," the company said in its alert.
Posted by Rich Miller at 8 December 2003 in Security | Print this Page
Cable & Wireless has agreed to sell its money-losing US operations to a Los Angeles investment firm for an announced price of $125 million. The deal includes a Chapter 11 filing for the American unit, which is a separate corporate entity from the British parent company.

The purchase by a unit of Gores Technology Group allows Cable & Wireless to exit its unprofitable US hosting business, which includes assets bought from Exodus and Digital Island. The bankruptcy filing will allow the company to dramatically slash the cost of exiting leases of surplus data center facilities. Under Chapter 11, debtor companies can reject leases for unneeded properties, and renegotiate leases to reduce costs going forward. As part of the bankruptcy filing, Cable & Wireless will provide the US unit with $100 million in debtor in protection (DIP) financing. This type of loan must be repaid prior to pre-bankruptcy financial obligations.

Posted by Rich Miller at 8 December 2003 in Hosting | Print this Page
Nat West's internet bank www.nwolb.com has been unavailable today, coinciding with an electronic mail fraud attack on the bank's customers. The mail [below] tries to trick NatWest customers to give away their account details in a similar fashion to an earlier wave of attacks on UK banks a month ago.

Conventionally, the drop sites for these attacks are hosted in Asia, however the ip address in this mail is registered to Pacific Bell, and is most plausibly a Pacific Bell ADSL customer machine acting as a reverse proxy to the actual machine collecting the Nat West customer banking details.

Posted by at 8 December 2003 in Security | Print this Page
The recent spate of attacks on internet bank account holders by fraudsters has extended to credit card accounts, with a mass mailed attempt to trick Visa account holders into giving out their account details.
Posted by mhp at 6 December 2003 in Security | Print this Page
During November www.nyi.net was the most reliable hosting company site monitored by us with just one failed request from our five measurement points during the month. New York Internet is the first company to be top of the table for two months, having previously been top in June.

Sites running on BSD operating systems occupied six out of the first seven places: Secure Dog Hosting runs OpenBSD, while New York Internet, INetU, USWest, IPowerweb, and Yahoo all use FreeBSD.

Ranking by Failed Requests and Connection time,
November 1st - November 30th

hosting_prov_nov2003.png

Posted by at 5 December 2003 in Hosting, Performance | Print this Page
Gentoo Linux said today that a server it uses to distribute its software was compromised by attackers on Tuesday. Gentoo's security team said the intrusion was detected within an hour, and it was "reasonably confident" that no distribution files were altered.

The Gentoo event comes just two weeks after a server compromise at The Debian Project was traced to an exploit in the Linux kernel that allowed local users running Userland software to upgrade their privileges to root.

Posted by Rich Miller at 3 December 2003 in Security | Print this Page
Ventures Online, which has been one of the fastest-growing hosting providers during the past six months, has signed a letter of intent to combine its business with Data393, a data center operator also based in the Denver market.

"We have signed a letter of intent to acquire certain assets of Ventures Online as part of a transaction in which Ventures Online will move into our data center," said Lee Woodward, president of Data393. "The combined companies will be one of the few web hosting companies to own its data center and be profitable with positive cash flow. We are excited about the opportunity to join with Ventures Online and continue to grow its hosting business."

Posted by Rich Miller at 3 December 2003 in Hosting | Print this Page

In the December 2003 survey we received responses from 45,980,112 sites.

Graph of market share for top servers across all domains, August 1995 - December 2003

Top Developers
Developer November 2003Percent December 2003Percent Change
Apache3029806067.413100569067.430.02
Microsoft944918021.02959657120.87-0.15
SunONE15252023.3915303723.33-0.06
Zeus7436111.657497911.63-0.02
Posted by wss at 2 December 2003 in Web Server Survey | Print this Page

Go Daddy gained 116K hostnames in November, more than doubling the growth of every other provider, according to our Hosting Provider Switching Analysis. German hosting giant 1&1 Internet was a distant second with a net gain of 54K hostnames, while Yahoo! was the only other provider to grow by more than 16K. That marks a slowdown from October, when the top four companies grew by at least 50K hostnames and the top 10 all gained 21K or more.

Go Daddy continued to set the pace for domain registrars, adding 151K new hostnames (compared to 61K for Network Solutions and 21K for eNom) while seeing about 40K expire. It was also a strong month for telecom hosting units, as Sprint, SBC Communications, Level 3 and Deutsche Telekom each gained more than 10K hostnames.

Top Hosting Providers By Growth, Oct 03 to Nov 03
Hosting Company Oct 03 Nov 03 Growth %
Growth
Primary
Region
GoDaddy Inc 1,467,264 1,583,263 115,999 7.9% America
1&1 Internet AG 3,443,442 3,497,569 54,127 1.6% Europe
yahoo.com 515,306 540,333 25,027 4.9% America
Sprint 140,691 156,614 15,923 11.3% America
SBC Communications 190,542 205,153 14,611 7.7% America
Strato AG 1,910,975 1,924,852 13,877 0.7% Europe
enom.com 370,825 383,329 12,504 3.4% America
Host Europe 526,971 539,011 12,040 2.3% Europe
Hostway 321,425 332,548 11,123 3.5% America
Posted by Rich Miller at 2 December 2003 in Hosting | Print this Page
German hosting giant 1&1 Internet's offer of three years of free hosting helped its US unit gain 10.5K hostnames in November, with most coming through new domain registrations or migrations of hostnames parked at domain registrars.

1&1 US Hostname Gains, November 2003 This month's hosting Hosting Provider Switching dataset shows 1&1's American unit gaining 7.3K new hostnames, with another 3K-plus hostnames switching from other providers. The largest single chunk came from Go Daddy (683 hostnames), followed by EV1Servers, Network Solutions, Register.com and eNom. All are domain registrars except for EV1Servers, whose net loss to 1&1 likely represents a shift in hostnames registered by EV!Servers resellers, rather than a flight of dedicated server customers to 1&1's shared hosting accounts.

Posted by Rich Miller at 1 December 2003 in Hosting | Print this Page
The web site for Global Name Registry, which operates the .name registry database, was back online this morning after it was hacked Saturday. "We did an update to Apache and PHP last week and someone managed to exploit a hole in one of these and replace the index file on the webserver," Global Name president Hakon Haugnes wrote in a post at the ICANN Watch web site, which was the first to report the intrusion. "No other data than the index.php were replaced, and no other data could be accessed as the webserver is physically and geographically separated from our Registry Systems. We have taken our webservers down during the weekend to further reinforce our website against similar incidents in the future."
Posted by Rich Miller at 1 December 2003 in Security | Print this Page