February 2017 Summaries

We have received inquiries about the Cloudflare vulnerability reported on February 23, 2017. The DigitalOcean security team has conducted its own research and found no customer data present in the breach. As a precaution, we have reset all session tokens for our users, requiring them to log in again. We recommend updating passwords, rotating API tokens, enabling Two-Factor Authentication, and taking other measures to protect accounts due to the vulnerability. Despite finding no evidence of exposed customer data, we are taking proactive steps to ensure user security and will continue to monitor the situation.

We've rolled out updates to our two-factor login features to make them easier to use, allowing developers to choose between an authenticator app or SMS as a primary method and between downloadable codes, authenticator apps, or SMS as backup methods. This change aims to improve usability while maintaining security, making it simpler for users to secure their DigitalOcean accounts. The new feature is now available in the account settings, and we're open to hearing suggestions on how to further enhance security features.

Load Balancers are a fully managed, highly available service that can be deployed as easily as a Droplet in DigitalOcean. The goal is to provide simple and intuitive tools for launching, scaling, and managing production applications of any size. Load Balancers cost $10/month with no additional bandwidth charges and are available in all DigitalOcean regions. They distribute incoming traffic across Droplets, allowing the creation of more reliable and performant applications by creating redundancy. Tags can be used to scale applications horizontally, and security features include SSL termination and end-to-end encryption options. The service is part of a broader roadmap that includes improvements such as new storage, security, and networking capabilities.