Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Just a quick question. When using shared hosting, can system admins (employed by the host) access your files and read your database connectionstring details? Can they also access your database, and view the files, without a connectionstring? I'm assuming there's a certain level of trust, but is this possible/common?

Thanks

share|improve this question

6 Answers 6

up vote 5 down vote accepted

Simple answer: yes. Encryption - does not work. After all, the connection string must be readable for the.... website ;) So, an admin always can get access to it.

share|improve this answer
1  
Some technologies (ASP.NET for example) allow you to encrypt configuration options such as connection strings. –  squillman Mar 8 '10 at 14:27
    
If they have physical access to the server, they have access to the encrypted connection strings, and thus all the data. –  Warner Mar 8 '10 at 14:29
    
Yeah, but dont forget the sahred hosting thing. The host HAS to be able to decrypt, and the admin can always inject a fake page to return the decrypted string. No sense in this scenario. –  TomTom Mar 8 '10 at 14:29
    
That would be true... –  squillman Mar 8 '10 at 16:21

Yes, unless you encrypt things with keys that the host does not have access to you always assume that the host can read everything you put on their server. That's a general rule for any server. Regardless of what permissions you set, the admin can always override them.

This does not speak to the ethics of the situation. That's why it's critical to go with a host you trust if you have sensitive data that you will be storing on their server(s). Trust should come from a lot of things such as a proven track record, documented processes and policies, and recommendations from other clients who are doing the same thing that you are.

share|improve this answer
1  
Even "ethical" companies are in a bind if a warrant comes from law enforcement and they're required not to tell you. –  Bart Silverstrim Mar 8 '10 at 14:28
1  
having had to turn over stuff without telling the customer at a hosting company I can tell you that you do feel dirty for a while. One of the things folks don't get about hosted/SAAS providers is that once the data doesn't live on your property- it's not your data. The real world implication is that even if you are told that there is a subpaoena, since it's not your server you're not entitled to stop it since you are "merely" a customer of that company- IANAL etc. –  Jim B Mar 8 '10 at 14:55
    
Jim-hearing stories like that always makes my skin crawl a little...:-/ I understand it, but wouldn't like being in that position. –  Bart Silverstrim Mar 8 '10 at 15:08
    
Those are good points. Yikes... –  squillman Mar 8 '10 at 15:10

You're asking questions that kind of have two components...is it possible? Yes. Much like your browser in "private browsing mode" now still has your web history traceable at the ISP level, your hosts holding your server(s) can see your data traffic (if it's unencrypted), and depending on the host arrangement if they have admin login to your server they could get into it (and if they really wanted to they could break into the server, but you should notice if you have monitoring software that your server went down...if you want to be paranoid, they could have stolen an image of the server to forensically analyze later out of your view).

Is it common? I would venture not, but I don't work for a hosting company. They probably have better things to do than sniff through your servers when they have hundreds or more clients and potential lawsuits and reputation damage if an ex-employee goes around talking about cool stuff they gleaned from XYZ corporation's servers.

But it's more than possible, especially if they're in the US and have a warrant from the FBI to get data on your company. If it's like libraries, they are told they have to turn over the data without informing you that they're doing it, or collect data traffic and turn it over without telling you. Encrypt everything and you make it much harder.

It's already done with law enforcement and cell phone companies (conversations and GPS data). Quite common there, but you're asking about server and data hosting, not telecommunications.

share|improve this answer

Anything which is shared has the possibility of being accessed by someone other then you ;

as far as hosting companies, as Bart have mentioned that they have loads of other jobs to do instead of sniffing through anyone's data ; but most of the theft in retail industry, computing industry is from the inside. so stay away of hosting anything which you do not want to share with anyone.

share|improve this answer

Bottom line is that they are the admins, it's their job to manage the server and the data on it, so they need access to it. You could try encrypting stuff, but you would only cause problems for yourself longer term. Worst case would be that if the host had to restore a load of data for you following a hardware failure, they may not be able to get it back. And you wouldn't have a leg to stand on as it would have been you who had locked them out.

share|improve this answer

First off, physical access is golden, with physical access to a system and enough time and effort, system administrators can gain access if they don't already have access. This affects situations like co-location (colo) services where a company rents space from the provider in a well-connected data-centre but provides and administers their own system. If malicious the only noticeable activity may be unexpected reboots, while the admin gains root/administrator access.

System administrators of virtual private servers, and shared web hosting have root of administrator access to the entire system. They need it to do their jobs. Now front-line call centre workers may not have administrator access, but a limited help desk type access for common tasks like password resets, etc.

Professional system administrators will not access other companies' web sites and data without purpose. Valid reasons include legal (i.e. law enforcement warrants, subpoena, writ) which may or may not include a secrecy order, technical including server configuration, upgrading, administration, log reviews, and computer / network security - looking for evidence of potential malicious users / attackers trying to gain unauthorized access.

That said, I've only seen co-workers abuse their access for premium content, primarily adult material. And there have been numerous cases of "revenge" unauthorized access of estranged spouses, partners, bf/gf that have made the press.

For the most part, it tends not to be a serious problem, but it does happen.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.