Micfo's Valued Customer!

[jvc01]

This is an appeal to Amir, as well as to make all the other valued customers aware through my following experience, that this could also happen to you, and in the hope that this won’t happen to anyone else again… that doesn’t deserve it.

Why would anyone be so stupid to do such illegal activities is beyond me, however, how could anyone be even more stupid as to create a lot of trails by staying with micfo for these many years, have many sites listing all contact details and then do something illegal? Well, if I had really done it, I certainly wouldn’t be here to complain about my lost sites, and expose myself even further – I would just go elsewhere and start again… do you think?

Did I do something that allowed my account to be hacked? I honestly don't know... the point is that it did happen and it wasn't by me.

When I finally received an email from MICFO support with the bad news, [Ticket BBJ-790095], it quoted a letter that was sent from my account that gave a “From” IP address (82.128.6.224) that when I looked it up, I found that it’s registered in Nigeria! Does that ring any bells yet?

As my account no longer exist, I cannot check any logs and cannot go further into this investigation and try to defend myself .

OK – one may argue that I am anyway responsible for my account – even if hacked into – and here I cannot argue. However, there are mitigating circumstances and I ask Amir to remember that not only am I a "valued customer" but to consider me as “innocent until proven guilty”, and therefore that I have not committed any illegal activities as proven just by looking into my logs.

Morris

[Amir]

Morris - First of all I apologize for the inconvenience you may have experienced. I just wanted to reassure you that all of our customers are valued to us and all treated equally.

At Micfo.com, we have a very strict policy when it comes to phishing and spam and we do not tolerate any kind of it whatsoever. On the other hand we have our upstream provider and datacenter that would put pressure on us in such situation. We are normally given a grace period of time to terminate and remove the offenders accounts/logs/files or else we will have a whole server null-routed which of course will cause inconvenience and service interruption to 200 other customers who are sharing the server environment with you. Simply we do not allow one client to violate our terms of service and cause problems to the rest of customers.

Our terms of service clearly points to such incidents and I would like to kindly ask you to go through it, read it carefully before actually turning the tables around, claiming Micfo has security issues. It completely goes down to the customer, again! You're fully responsible of securing your account and making sure no one will gain illegal access to it. At Micfo.com we only have limited control when it comes to security at the end-user. We secure the server and its environment, but there's no way we can prevent others from gaining illegal access to user's account. (hacker gains access to your password, login etc.)

Here's a link to our terms of service:
http://www.micfo.com/web-site-hostin...f-service.html

Again, I feel for you and completely understand your situation, however there's not much that can be done here apart from providing you with a backup of your data should it still exist.

Sincerely,
Amir.

[olamoree]

Without getting into who is right and who is wrong and why, I would like to take this opportunity to appeal to Micfo, that, in view of a "valued customer" having his cord yanked and his data/files probably lost, that steps be taken to favor the Micfo customer in anticipation of similar hackings and problems leading to disconnections and worse, Amir, desertions.

Micfo Technical Department could devise a list of Guidelines, especially directed at the ignorant and newbies, giving precise instructions on what is "high risk"... Fantastico or cPanel, and how to protect ones self from losing control of what they have put up, explaining such mysteries as 755 and 777.

Now would be the ideal time to set up another of those wonderful Tutorials that used to be on the Micfo site... I can't find them now. Tell us what and how, in enough detail so that Micfo doesn't have to pull the plug on anyone again. Surely there is available software to monitor "hacks" and altho Micfo might disagree, we can only look to them to teach us a reasonable degree of defensive measures while Micfo themselves take the initiative to anticipate customer problems... after all, we need Micfo and Micfo needs us.

Marhaba

[Charles]

Interesting to say the least!!

[GhostRider2110]

The problem is you can't cover every possible configuration a user could install. You can do a very high level document, which you can fine all over the web. Most of the applications 3rd party applications have support forums which would be much better at advising on how to secure the application.

Just when you start telling folks how to configure a 3rd party app, you get into the support roll. While Micfo has been good to me as far as helping me with a couple 3rd party apps. I do not expect them to main support for them.

See-ya

[Candyman]

I have had my hosting with micfo for several years and even went as far as lifetime hosting. My site was shut down today due to a trojan being placed there. Just last week I was hacked and ask support tech to tell me what i had to do to better secure my site. After securing my files and folders I get news today that my site was suspended due to a trogan. I went through the process to see why and got doors shut in my face at every turn. Waiting to see the final outcome.

[drachma]

Have you tried live support?

[JohnS]

Hello,

I sympathize with your situation but there is only so much we can do for security. Ultimately if the clients databases and scripts aren't secure, nothing we can do on our end will stop 100% of exploits.

If this matter has still not been resolved, feel free to PM me the ticket ID and I will check into it for you.

[Candyman]

Update: My site was placed back up for about a week. And yet it is down again. I don't know what to do. I am a lifetime customer and really can't afford to move my sites. I have really tried to stay on top of things and yet still another problem. But the thing that really upsets me the most is that when there is a problem you get no emails from support. I go to the live chat and they tell you nothing but to send a ticket into abuse. And then you have to wait most of the day for replies. So something that could be resolved in mins. takes hours.

Another thing is that if they find a problem if they contacted you you could fix the problem with no down time. I respect that they have to protect their servers but guys can we catch a break here.