9 Jul
2012
9 Jul
'12
3:10 p.m.
Hi Phil,
On Mon, Jul 09, 2012 at 02:06:18PM +0100, Phil Brooke wrote:
On Sat, 7 Jul 2012, Andy Smith wrote:
Yeah as I already said I've taken that on board and won't be doing
it again. Which means that everyone who has currently disabled email
password resets needs to be really sure about that.
Today a customer popped up on IRC saying that they
had broken their
VPS and couldn't remember their account details in order to use the
console / rescue VM.
[…]
As some others have replied, I'd be unhappy with the use of utility
bills. Perhaps the control panel could offer a range of
options covering
different tastes/tolerances from indifferent to very paranoid. But
that makes it all very complicated.
What I am going to do is talk to just the customers who have
disabled email password resets and come up with some process that
suits the majority of them.
I don't mind discussing things amongst the wider customer base but I
feel like we are getting mired down in suggested processes which
will only ever apply to hypothetical other people. On this, I'd
rather consult with the people it is more likely to affect.
The chances of just one method being suitable for everyone are
small, so I imagine there's going to have to be several levels and
an incredibly tedious fallback strategy for a customer who claims to
have lost ability to satisfy any of the other checks.
(Aside: Has Bitfolk had any instances of customers
being
incapacitated (or dying) and relatives needing to recover access to
the VPS? E.g., if it's used for domestic email?)
Yes. A customer died, so I took legal advice and came up with a
policy.
In the UK, if there is a will then the matter has to be dealt with
by an executor of the deceased's estate, and I need to see an
original copy of the death certificate.
If there is no will then a photocopy of the death certificate is
acceptable.
From the death certificate I am able to confirm (by phoning the
registrar) that the individual actually has died, there is or isn't
a will, and next of kin is as claimed.
Assuming no will, I can then hand over the deceased's property to
the next of kin. If there is a will I am not 100% sure what happens
but I imagine it requires the executor to tell me if the contents of
the VPS are mentioned or not, and then do what they say.
This is roughly the same process that UK banks follow when an
account holder dies. I didn't really feel like it was worth
documenting that on the web site as it seemed a bit morbid, but
policy exists.
I don't know what the process would be if an overseas customer died
because I don't know the relevant laws, what their death
certificates look like, who I contact, etc. I'm happy enough to wait
until that happens and find out then.
Note that if the deceased's VPS continues to run or if I can boot it
and make it run, then there is no reason why it can't keep running
as long as someone pays for it. I don't really need to care who is
paying for it as long as they do. It's mainly giving access to the
data inside the VPS that is the issue.
Cheers,
Andy
--
http://bitfolk.com/ -- No-nonsense VPS hosting