Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

What would make you switch VPS providers?

servuryservury Member, Patron Provider

Hello LET,

I'll keep this short and to the point. My name is Matteo, I am the owner and developer of Servury, an anonymous VPS provider based in Canada. I am dead set on making Servury into the #1 privacy cloud for the people, and I will genuinely go to stupid lengths to make it happen. I think a lot of other "privacy" providers suck really hard and only use privacy as a marketing gimmick.

I want to ask you guys :

  • What features/characteristics do you currently/would appreciate on your preferred hosting provider(s)?
  • What do you dislike about your current hosting provider(s)?

In March I posted a similar thread :
https://lowendtalk.com/discussion/215138/what-features-would-you-like-to-see-the-most-on-your-server-provider/p1

From that thread, I implemented the following suggestions :

  • BYOIP/BYOASN/BGP
  • True unlimited bandwidth via throttling after main limit reached
  • SEV-SNP/encrypted memory plans -> kinda went overboard here and created the first zero-knowledge VPS (Blackbox). Special thanks to @forest for the SEV-SNP suggestion and various other hardening stuff.

Separately, from other user's suggestions, I added these features :

  • Self hosted crypto payments using our own nodes and backend
  • Whole site working without Javascript/Tor Browser safest security setting
  • Custom ISO/UKI/Disk image on Blackbox
  • Measured boot on Blackbox

What I'm on right now:

  • More Blackbox capacity in Montreal. The queue has been full since launch and new metal lands this month.
  • A second Blackbox location in the Netherlands.

Same deal as last time: every suggestion gets a reply from me, the ones we build get credited to you in this thread, and nothing is too small or too paranoid. If you think something we do is dumb, say it too.

Thanked by 2nghialele x1arch

Comments

  • forestforest Member
    edited 1:26AM

    @servury said: What features/characteristics do you currently/would appreciate on your preferred hosting provider(s)?

    I'd love the ability to see the host SSH key fingerprint before the first login so I know I'm not getting MITMed. Currently the only workaround is to connect to VNC, run ssh-keygen -lf /etc/ssh/ssh_host_ed25519_key.pub, then SSH in and visually compare the fingerprint before accepting it. TOFU is better than nothing but it's not enough, especially when using Tor.

    @servury said: What do you dislike about your current hosting provider(s)?

    • Constant unknown-unicast flooding and L2 networking leaks
    • Awful all-around security, running QEMU as root (aka all hosts using vanilla Proxmox...)
    • Unstated network filtering that ends up breaking things like low source ports
    • Using Virtualizor or a vibe-coded slop panel that slows down my whole browser

    @servury said: A second Blackbox location in the Netherlands.

    There are soooo many providers in the Netherlands. I'd much rather see smaller, niche locations.

    Thanked by 1servury
  • moyuwuhenmoyuwuhen Member

    Kim Jong-un: VPS hosting must be stable

  • forestforest Member

    @servury said: Whole site working without Javascript/Tor Browser safest security setting

    @Yuki_ ^^^

  • servuryservury Member, Patron Provider
    edited 1:33AM

    @forest said: I'd love the ability to see the host SSH key fingerprint before the first login so I know I'm not getting MITMed. Currently the only workaround is to connect to VNC, run ssh-keygen -lf /etc/ssh/ssh_host_ed25519_key.pub, then SSH in and visually compare the fingerprint before accepting it. TOFU is better than nothing but it's not enough.

    We already have that! and I think you'll like how it works.

    On a Blackbox with measured boot, the SSH host key is generated inside the
    initramfs on every boot and its SHA-256 goes into the SEV-SNP attestation
    report's REPORT_DATA. The CPU signs the report. blackbox-verify (python, in
    the downloads) verifies the signature chain back to AMD's root, checks the
    measurement against the published firmware/kernel/initrd, keyscans the VM,
    confirms the key on the wire is the one in the report, and prints you the
    known_hosts line. So you get the fingerprint before you trust anything, and
    it's bound to the hardware, not to what a console shows you. The VNC method
    you describe still trusts the host, since the host owns the VNC.

    Thanked by 1forest
  • DyingcatDyingcat Member

    Stability is the most important.

    Thanked by 2nghialele servury
  • nghialelenghialele Member

    Can we have Blackbox Singapura next?

    Thanked by 1servury
  • servuryservury Member, Patron Provider

    @averagedatahoarder We clearly state our bandwidth limits, I don't think it's fair to have us listed on there. We did change from "unmetered" to having clear limits (with throttle after limit reached) on the Blackbox plans, and gave a grace period, but we're never going to do predatory practices like saying we sell plans with unmetered when there is clearly a limit we just don't want to state. I think it's only fair what we did. We added limits after some users (probably you lol) used insane amounts of bandwidth in an insanely short amount of time.

  • servuryservury Member, Patron Provider

    @nghialele said:
    Can we have Blackbox Singapura next?

    Yes, Singapore will come after Amsterdam.

    Thanked by 2forest nghialele
  • openidopenid Member

    @servury said:

    @averagedatahoarder We clearly state our bandwidth limits, I don't think it's fair to have us listed on there. We did change from "unmetered" to having clear limits (with throttle after limit reached) on the Blackbox plans, and gave a grace period, but we're never going to do predatory practices like saying we sell plans with unmetered when there is clearly a limit we just don't want to state. I think it's only fair what we did. We added limits after some users (probably you lol) used insane amounts of bandwidth in an insanely short amount of time.

    Is it this user who posted it? I did not see the original poster’s ID.

    But frankly, using privacy as a selling point is not an effective way to attract a large number of orders.

    Thanked by 1servury
  • servuryservury Member, Patron Provider

    @openid said: Is it this user who posted it? I did not see the original poster’s ID.

    It is. Thank you for bringing that post to my attention by the way.

    @openid said: But frankly, using privacy as a selling point is not an effective way to attract a large number of orders.

    False.

    Thanked by 1forest
  • q112664q112664 Member

    Promoting privacy alone only attracts criminals.

  • forestforest Member
    edited 2:47AM

    @q112664 said:
    Promoting privacy alone only attracts criminals.

    That's bullshit.

    Even Tor, which is free, private, anonymous, censorship-resistant, and extremely difficult for even law enforcement to break, has significantly more legal traffic than illegal traffic overall.

  • servuryservury Member, Patron Provider

    @q112664 said:
    Promoting privacy alone only attracts criminals.

    Ah yes, the good old "cryptocurrency is only used by criminals" logic.

    Thanked by 2forest nghialele
  • yoursunnyyoursunny Member, IPv6 Advocate

    @q112664 said:
    Promoting privacy alone only attracts @forest

    Fixed that for you.

  • forestforest Member

    @yoursunny said:

    @q112664 said:
    Promoting privacy alone only attracts @forest

    Fixed that for you.

    But I'm everywhere. I'm even in the background of your profile pic.

    Thanked by 1yoursunny
  • q112664q112664 Member

    @servury said:

    @q112664 said:
    Promoting privacy alone only attracts criminals.

    Ah yes, the good old "cryptocurrency is only used by criminals" logic.

    I might have overstated it. Privacy protection is good, but it can also shield criminals.

    Thanked by 1bluesega
  • forestforest Member
    edited 2:52AM

    @q112664 said:

    @servury said:

    @q112664 said:
    Promoting privacy alone only attracts criminals.

    Ah yes, the good old "cryptocurrency is only used by criminals" logic.

    I might have overstated it. Privacy protection is good, but it can also shield criminals.

    That's true. Just like smooth roads with few potholes: They're good, but they can also make it easier for a bank robber to get away, and for kidnappers to move farther distances in a short time.

    Thanked by 2servury tzuli
  • servuryservury Member, Patron Provider

    @q112664 said:

    @servury said:

    @q112664 said:
    Promoting privacy alone only attracts criminals.

    Ah yes, the good old "cryptocurrency is only used by criminals" logic.

    I might have overstated it. Privacy protection is good, but it can also shield criminals.

    Yeah, just like how cash can be used to pay for hookers and cocaine.

  • servuryservury Member, Patron Provider

    @forest said:

    @q112664 said:

    @servury said:

    @q112664 said:
    Promoting privacy alone only attracts criminals.

    Ah yes, the good old "cryptocurrency is only used by criminals" logic.

    I might have overstated it. Privacy protection is good, but it can also shield criminals.

    That's true. Just like smooth roads with few potholes: They're good, but they can also make it easier for a bank robber to get away, and for kidnappers to move farther distances in a short time.

    @servury said: Yeah, just like how cash can be used to pay for hookers and cocaine.

    Great minds think alike.

    Thanked by 1forest
  • .... When the other option is Berohost

Sign In or Register to comment.