Diversified Hosting Offering Minecraft Hosting services with a Human Touch! Starting at $6 Per Month

to_er · Mar 24, 2016

Hello World!
I shall, in this post, try to clear doubts of the general public caused do to some of the comments above.

Let's Encrypt?

I guess you can't afford an SSL certificate - especially for a site that handles billing.

Let's Encrypt, sponsored by EFF, Mozilla Foundation and many others, provides as much security as you would get from any paid providers as long as you go with a DV certificate. Do you think that they have less strong encryption/security/advantage than your website just because they use Let's Encrypt ?

I am fully aware of that - I am not dumb.

I am simply stating that you chose for the cheaper (free) option instead of actually getting a paid ssl.

What's the point here ? If Let's Encrypt does it's job well and they could handle it then why it matters ? I'll make this clear by using an example. There is a free live chat application called tawk(https://tawk.to) and many popular websites use them because they have features in par to or more than paid alternatives -- no one will boycott it just because they offer it for "free". Choosing "free" do not always mean they are being non-professional as long as the quality is not compromised.

the awkward moment he told me they charge alot because they have a GREAT system admin yet i can still wget their website lol not very secure.

Can you please show me what you've got when you wget their website ? I bet it is nothing other that what they want you to know, it'll just be some images and css templates. I can wget Google and so can I wget Wikipedia... there is no security flaw in not blocking wget.

I just noticed that your admin page is very visible to the general public - The admin page can be accessible by just typing /admin on the end of your website's URL. This is a huge vulnerability and makes it even easier for attackers to exploit your website, so I recommend for you to change it.

He has got a valid point, it is a nice idea to hide the admin page from the general public. Maybe, the developer/admin is confident enough by updating their application regularly and/or by limiting login attempts, using two-factor admin login and obviously will be using a 24-32 char long password. Though, I also recommend changing the admin page url.

For Example, Staminus. Dear old Staminus. The best DDoS Protection that is currently out there. Promised their clients that they were the best out there and have the best security. A few weeks ago they were hacked because they used the SAME root password on all of their routers and boxes. They stored Credit Card data in PLAIN TEXT. Their services were offline for days. All of those promises and they were still shit with their security.

Things like this happen even if you're extremely careful about security. Popular companies like Sony, Apace, Facebook and Twitter got hacked not because they didn't had the skill and capital. If you're a good target and get attention of an experience hacker, he will closely inspect your website and will make an attempt when he discovers a vulnerability. Keep in mind that nothing will protect you 100% from all attacks.

1. Pricey SSL to secure Billing

If Let's Encrypt can give the same level of security/encryption as Pricey SSL, why do you force them to use a pricey one on their website?
They have the right to choose whatever they wish and I can guarantee you that they are doing the right thing choosing Let's Encrypt.

The owner resides in Ohio and to run a web-based company. There are certain rules and regulations you have to follow. Ex. CC data has to be encrypted, site must have SSL on any page requesting billing info Etc.

CC data are obiviously encrypted by the billing application and they have SSL on every page(all pages are encrypted) on their website as far as I can see.
--------------------------
I've answered/replied the general security/server side questions/opinions. Rest is the duty of company staff/owner.
-------------------------
DON'T AGREE WITH MY VIEWS ? JUST PM ME AND I'LL CONTACT YOU BACK
WAS THIS ANSWER USEFUL ? GIVE ME A VOUCH!

FTSOwner · Mar 24, 2016

to_er said:
Hello World!
I shall, in this post, try to clear doubts of the general public caused do to some of the comments above.

Let's Encrypt, sponsored by EFF, Mozilla Foundation and many others, provides as much security as you would get from any paid providers as long as you go with a DV certificate. Do you think that they have less strong encryption/security/advantage than your website just because they use Let's Encrypt ?

What's the point here ? If Let's Encrypt does it's job well and they could handle it then why it matters ? I'll make this clear by using an example. There is a free live chat application called tawk(https://tawk.to) and many popular websites use them because they have features in par to or more than paid alternatives -- no one will boycott it just because they offer it for "free". Choosing "free" do not always mean they are being non-professional as long as the quality is not compromised.

Can you please show me what you've got when you wget their website ? I bet it is nothing other that what they want you to know, it'll just be some images and css templates. I can wget Google and so can I wget Wikipedia... there is no security flaw in not blocking wget as long as the admin know what he is doing.

He has got a valid point, it is a nice idea to hide the admin page from the general public. Maybe, the developer/admin is confident enough by updating their application regularly and/or by limiting login attempts, using two-factor admin login and obviously will be using a 24-32 char long password. Though, I also recommend changing the admin page url.

Things like this happen even if you're extremely careful about security. Popular companies like Sony, Apace, Facebook and Twitter got hacked not because they didn't had the skill and capital. If you're a good target and get attention of an experience hacker, he will closely inspect your website and will make an attempt when he discovers a vulnerability. Keep in mind that nothing will protect you 100% from all attacks.

If Let's Encrypt can give the same level of security/encryption as Pricey SSL, why do you force them to use a pricey one on their website?
They have the right to choose whatever they wish and I can guarantee you that they are doing the right thing choosing Let's Encrypt.

CC data are obiviously encrypted by the billing application and they have SSL on every page(all pages are encrypted) on their website as far as I can see.
--------------------------
I've answered/replied the general security/server side questions/opinions. Rest is the duty of company staff/owner.
-------------------------
DON'T AGREE WITH MY VIEWS ? JUST PM ME AND I'LL CONTACT YOU BACK
WAS THIS ANSWER USEFUL ? GIVE ME A VOUCH!

Thanks you for your time taking time on our thread to deliver up the information in a different manner.

A few things we would like to expand upon on though.

Your are absolutely correct even after a well secured and maintained infrastructures can (and do as stated) "bend". However beyond keeping those interested people at bay and/or expenses (momentary and/or otherwise) to execute such a hacking as high as possible. We even "throws" in some changes throughout our infrastructure to prevent "single point" hacking. Did you know some providers deploy a node called a "master" or "command central"? Basically those deployment practices call for a slightly larger node and they "throws" everything right into it. Meaning once a hack is executed on this node they could in theory get access to EVERYTHING. Not only that but these targets are considered "first class" over infrastructure such as our (since expenses is generally driven up to hack and get the similar access).

To add to the above comment we made about our practices that we do not even transfer/accept/store payment details. We instead rely on Paypal to be up to the par with PCI compliance and to secure their infrastructure to deter their target audiences. They have much better idea who, when, where, and how credit fraudsters/information harvesters/etc do the "dirty works". Thus their infrastructure is best secured against these attackers in addition to standard security practices.

Thanks you again and you have a nice day!

to_er · Mar 25, 2016

Thank you for your clarification and noticing my efforts.

FTSOwner · Mar 25, 2016

to_er said:
Thank you for your clarification and noticing my efforts.

No problems that what we are here for! Thanks again for the dedication in that post.

In other news we had made a slight improvement in delivering a more convenience servicing to our customers. We had now switched our Multicraft configuration so it accept the EULA automatically. We of course added that basically all of our customers is expected to abide by this policy laid out by Morjang and by accepting our TOS they are agreeing to the EULA at the same time. This already been informed to our customer base as we promised in the TOS to keep our existing customers aware of changes (unlike some places that says that you have to "be aware yourself" which honestly makes no logical sense).

Please let us know if you have any questions or concerns about this slight update.

CaptainJohn · Mar 25, 2016

It's quite impressive how your posts have managed to maintain their quality and maturity through the generalised shitstorm of this thread

FTSOwner · Mar 25, 2016

CaptainJohn said:
It's quite impressive how your posts have managed to maintain their quality and maturity through the generalised shitstorm of this thread

Thanks you, we always keep quality content and maturity a priority while operating our business as it truly display the good quality we have to offer within our servicing.

FTSOwner · Mar 25, 2016

Techie said:
So I ordered a vouch copy and the server went just fine. They do offer some free goodies you won't normally see on a regular host, budget or not. For example, an external server to put your backups in so you don't have to use up your server storage! Support is nice and usually responds to tickets within minutes.

Now, please don't bash me if you have a negative experience. Everyone has their experience with something At least the owner is not putting it $10/GB unlike the 'giant' game hosts.

TL;DR: Vouch

Thanks you very much for taking your time to write this up and for your feed back on our support service! In addition thanks you for for also making it more clear that we do not charge $10+ for every single GB. Feel free to enjoy the rest of our service and do let us know if there anything else we can do for you.

You have a nice day!

to_er · Mar 26, 2016

Owner knows what he is doing.
Vouch!

FTSOwner · Mar 26, 2016

to_er said:
Owner knows what he is doing.
Vouch!

Thanks you for the kind words really appreciate it!

FTSOwner · Mar 27, 2016

Hello and happy Easter!

We had receive many variations of "why do you charge this much?" type questions over the course of the last couple of days. So we thought it would be easier for both us and visitors to be able to get that responded in our new FAQ! https://diversifiedhosting.com/faq/

We even discuss about VPS/dedicated servers as some had stated it "cheaper" route to go. However these aren't for everyone.

You can go directly to that one right here https://diversifiedhosting.com/faqwd/cant-i-just-choose-a-vps-instead-which-is-cheaper/ !

Don't see any of your questions/concerns in our FAQ? No problems just let us know and we will be happy to response to them.

FTSOwner · Apr 2, 2016

Hello MCM members,

We had recently started up our Knowledge Base as we are started receiving common issues from our fellow customer base.

This addition is there helps people determine where the connection issue most likely coming from as well addressing client side issues should that the source of the problem.

You can view this particular addition here https://client.diversifiedhosting.c...va-net-connectexception-connection-refused/2/

to_er · Apr 2, 2016

Nicely written. Good Job

FTSOwner · Apr 2, 2016

to_er said:
Nicely written. Good Job

Thanks you we do our best to make our articles as understandable as possible so people will have the least problem following along.

FTSOwner · Apr 3, 2016

Hi MCM members,

We would like to post that we just made a few modifications to our website such as making the FAQ more accessible on the website and getting rid of the Paypal logo on the home page.[DOUBLEPOST=1459711081][/DOUBLEPOST]We had recently got a major increase count of unsolicited requests (Job positions mainly) on our chats. Please use it for what it is intended for. From this post onward any unsolicited requesting may be deemed as a mean of abusing our support platform and be treated as such.

Thanks you.[DOUBLEPOST=1459907825][/DOUBLEPOST]Check out our new video we made!

to_er · Apr 6, 2016

FTSOwner said:
Hi MCM members,

We would like to post that we just made a few modifications to our website such as making the FAQ more accessible on the website and getting rid of the Paypal logo on the home page.[DOUBLEPOST=1459711081][/DOUBLEPOST]We had recently got a major increase count of unsolicited requests (Job positions mainly) on our chats. Please use it for what it is intended for. From this post onward any unsolicited requesting may be deemed as a mean of abusing our support platform and be treated as such.

Thanks you.[DOUBLEPOST=1459907825][/DOUBLEPOST]Check out our new video we made!

I'm getting this : http://awesomescreenshot.com/0f85rold66

to_er · Apr 6, 2016

FTSOwner said:
Hi MCM members,

We would like to post that we just made a few modifications to our website such as making the FAQ more accessible on the website and getting rid of the Paypal logo on the home page.[DOUBLEPOST=1459711081][/DOUBLEPOST]We had recently got a major increase count of unsolicited requests (Job positions mainly) on our chats. Please use it for what it is intended for. From this post onward any unsolicited requesting may be deemed as a mean of abusing our support platform and be treated as such.

Thanks you.[DOUBLEPOST=1459907825][/DOUBLEPOST]Check out our new video we made!

Now I can see the video(turns out to be some issue with firefox, I'm now using chrome). First, I appreciate you for sharing a animated story, I see this as the starting of a change in mc-market and we can soon expect other provider to use similar animated interesting stuff to promote their host and thus making mc-market a bit more interesting.
I like the way you told the story... characters and all. It had a fast pace and never bored me(I watched it in full

).
I suggest you to make this a video series, featuring the two characters for TUTORIALS like help setting up bungeecord server etc... this will surely make you stand out from the rest(I don't know how much it cost(time/money) though.
Keep up the good work.

FTSOwner · Apr 6, 2016

to_er said:
Now I can see the video(turns out to be some issue with firefox, I'm now using chrome). First, I appreciate you for sharing a animated story, I see this as the starting of a change in mc-market and we can soon expect other provider to use similar animated interesting stuff to promote their host and thus making mc-market a bit more interesting.
I like the way you told the story... characters and all. It had a fast pace and never bored me(I watched it in full ).
I suggest you to make this a video series, featuring the two characters for TUTORIALS like help setting up bungeecord server etc... this will surely make you stand out from the rest(I don't know how much it cost(time/money) though.
Keep up the good work.

Thanks you very much for your contribution! Got to admit that is very good idea turning this into an full series of these characters. To demonstrate in a different way that we do what we say.

Speaking of "doing what is said". Everyone says that they don't oversell and/or overload the nodes and keep them online. But how many of those providers really does just that?

With us your are able to keep an eye on our node(s) that are used to provision Minecraft servers. From the up time, to the pings, down to the hardware utilization! We will even be displaying a full 30 days history at a time once we have the monitors running for that long (we just put them online about 13 hours ago).

Monitoring Main page: https://diversifiedhosting.com/performance-status/

Hardware Monitoring may be viewed at any time here: https://diversifiedhosting.com/mc-node-1/cpuram-load-mc-node-1-real-time/

Network Latency Monitoring (Ping Results) may be viewed at any time here: https://diversifiedhosting.com/mc-node-1/network-response-time-mc-node-1-realtime/

Up Time Monitoring may be viewed at any time here: https://diversifiedhosting.com/mc-node-1/uptime-report-mc-node-1-real-time/

Feel free to let us know if you have any questions or concerns about services.

FTSOwner · Apr 8, 2016

Tchimp said:
Their prices may be a bit pricey but their staff and owners dedication is apparent. I wish you luck! Summer is coming and in turn, lots of kiddie hosts and hosts that come up for one month and vanish the next will begin to appear. These sell for prices unable to compete with by longstanding hosts such as Diversified Hosting.

My opinion is my own. While some members of MC-Market may be against this host, they have never tried this host before. You can't judge a book by its cover can you?

Thanks you very much for your contribution and sharing your opinions on our thread! You indeed absolutely correct regarding us ALL being as dedicated as possible to meeting our customers' resources and support needs. You couldn't also said it any better as it very true companies like us should be given a true chance instead of simply being judged solely on our pricing points.

Please do let us know if there anything we can do you at any time and you have a nice day.