If you're on @Railway too: create new keys now, keep the old ones on until deploys come back, then redeploy and revoke. And check what can still reach your database from the internet.
#Railway #infosec #cybersecurity #AIagents #buildinpublic
That's true. But yesterday it was “just” 6 hours. Today we are about to reach 24 hs straight. It's ridiculous.
I've been on Railway for almost a year and pay over $100/month. Today's incident is pushing me to move every project to another provider.
For months we've dealt with failed deploys and functions randomly going down, and this isn't their first security issue. We thought we were safe, but no Railway customer is.
So, honest question: which provider would you trust today, and why? 👇
Hoje cancelei tudo que tinha no railway e assinei uma VPS, so tenho uma coisa a dizer.
VAI TOMAR NO CU RAILWAY
An urgent notice from the Railway team
blog.railway.com/p/security-…
More than a dozen security incidents in about thirty hours: PHP, GitLab, LiteLLM, Zeabur, Railway, eMudhra. Update, pin LiteLLM 1.106.2, rotate Railway secrets, check AI-key billing. #infosec
Cloud provider Railway probes possible exposure of customer secrets
Railway said an unauthorized third party may have accessed encrypted environment variables and obtained the decrypted contents of some.
The company urged all users to rotate environment variables and private registry credentials, and check service logs for unusual activity.
Deployments are paused during the investigation, preventing users from rolling out new versions until builds resume.
Railway said it will email customers it confirms were affected.
openx.social/u/2f89ef15-f207…
The only positive shit I get out of this is more opportunities for b2b local server setups for selfhosted Paas
Llevo casi un año en Railway y pago más de $100 al mes. Lo de hoy me hace mover todos mis proyectos a otra infraestructura.
Llevamos meses sufriendo deploys caídos y funciones que se caen solas, y no es la primera falla de seguridad. Pensábamos que estábamos seguros, pero ningún cliente de Railway lo está.
Abro el debate: ¿qué proveedor usarías hoy y por qué? 👇
