Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!


Forgot your password?
Security The Internet

Ask Slashdot: Should Hosting Companies Have Change Freezes? 138

AngryDad writes "Today I received a baffling email from my hosting provider that said, 'We have a company-wide patching freeze and we will not be releasing patches to our customers who utilize the patching portal for the months of November and December.' This means that myself and all other customers of theirs who run Windows servers will have to live with several critical holes for at least two months. Is this common practice with mid-tier hosting providers? If so, may I ask Eastern-EU folks to please refrain from hacking my servers during the holiday season?"
This discussion has been archived. No new comments can be posted.

Ask Slashdot: Should Hosting Companies Have Change Freezes?

Comments Filter:
  • by Anonymous Coward on Wednesday November 21, 2012 @06:36PM (#42060943)

    Using windows to provide an internet facing service was the first mistake.

  • by A bsd fool ( 2667567 ) on Wednesday November 21, 2012 @06:40PM (#42060997)
    Under any shared hosting, or control-panel-abstracted hosting, you're at the mercy of your provider for things like this. I realize they offer stuff on the cheap, but it's times like these when you realize you're getting what you've paid for. Many more hosting companies have hypervisors amongst their offerings than did just five years ago, and you can get a basic ESXi server for $50/month or thereabouts. Add memory, disk space, IPs, and bandwidth to suit.
  • by Anonymous Coward on Wednesday November 21, 2012 @06:41PM (#42061005)

    This is for automated patching, you may certainly request to be patched by the support teams. Typically these two months are the busiest for online shopping sites and a botched patch could cost the business tons of money. Since you know your business the best, you make the call. Better safe than sorry in my opinion.

  • by HaeMaker ( 221642 ) on Wednesday November 21, 2012 @06:46PM (#42061061) Homepage

    Two months is a looong time. 17% of the year not getting full fidelity on your contracted services seems excessive. Usually, changes freezes are a few hours in the middle of the night, once a week.

  • by gavron ( 1300111 ) on Wednesday November 21, 2012 @06:57PM (#42061181)

    What he said.

    I'm sorry the Windows-mods modded it down. It's instructional and it's informational. NOBODY should EVER use windows servers as Internet-facing devices.

    Sorry, mods. Reality suggests the 0 is your score for having a clue.


  • by Sycraft-fu ( 314770 ) on Wednesday November 21, 2012 @07:02PM (#42061243)

    When you fall off that high horse.

    What is the reason for an anti-outsourcing rant in this thread? To me, it sounds like the guy has his own website and that's what he's talking about. Do you host your own website? By that I mean do you have your own server, on your own property? If not, then you are outsourcing it. Even if you do, you are still probably outsourcing your Internet access and power generation.

    If you don't like outsourcing that's fine and there's plenty of arguments against it, but save it for when it is relevant. Don't just go off on it.

    Most individuals outsource their webhosting, and for good reason.

  • "Your" servers? (Score:2, Insightful)

    by Anonymous Coward on Wednesday November 21, 2012 @07:05PM (#42061269)

    How are they "your" servers if you cannot patch them whenever you deem necessary?

  • Not hosting (Score:4, Insightful)

    by LordLucless ( 582312 ) on Wednesday November 21, 2012 @07:35PM (#42061543)

    You didn't get this email from your hosting company. You got it from the company managing your servers. The fact that it's the same company is largely irrelevant.

    If the server management company isn't flexible enough to meet your needs, do it yourself. You keep track of the patches, you decide when they're ready for release, you release them, you test them. If you don't have the skills for that, or the money to hire someone with the skills, then get another company to do it. If you're using a dedicated server, there's nothing stopping you giving someone else the access to manage and patch it.

    If you yourself don't have root/Administrator access, then you don't have a server; you have access to a server. Fork out a little bit extra, and get a dedicated box that you control.

  • by dbIII ( 701233 ) on Wednesday November 21, 2012 @10:19PM (#42062883)
    Since in this case you can patch without reboots, the answer is just switching to linux (or anything else that can patch without reboots) CAN solve the problem.
    Of course it doesn't solve every server problem, but nobody above said it would, just you dishonestly shifting the goalposts and pretending it's no good unless it fixes problems that were not even being discussed here. That's a bit of a slimy little tactic IMHO so you must feel very strongly if you are prepared to lower yourself to that level, but let's keep all the mindless emotive fanboy bullshit out of it since it just makes you look like more of an idiot than you actually are.

"What the scientists have in their briefcases is terrifying." -- Nikita Khrushchev