While browsing the aaPanel topic recently, I found someone discussing that the installation script of aaPanel has hidden tracking code. We clarify here that the tracking code of the installation script is used to record the server IP, installation time and the number of installations of this IP when the user installs the panel. The code of the script will only be recorded once during installation The following code information will collect user ip , total number of site, database and ftp, device information (system version, memory size, processor model, web server type, panel version) There is also a code to record whether the IP installs aaPanel here In addition to this, we have no other tracking code. If there is any need to track any information in the future, we will add a statement here and execute the tracking after the user’s consent. Finally, thank you for your trust and use

thanks for clarify. Its important to know this

@aaPanel_Jose here’s the full details https://www.lowendtalk.com/discussion/comment/3105526#Comment_3105526

few people said to me that aapanel tracker information can grab data too , hope that its not true as privacy and trust is more important

now everybody wants to have usage data. no problem with it

kaz050457 I just browsed this article and found that these codes need to be clarified. Any suggestions about privacy and security in the future can also be feedback to me. Thank you In addition, the code of our panel is completely open source, everyone is welcome to supervise

aaPanel_Jose the main request is to use secured https links instead of plain text http link. Also, download programs from their official website and verify the files via md5 instead of just file size. These are some of the most basic security steps. This is a request and not complaint. I suppose everyone will agree with me on this.

InoT We will improve this. Thank you for your comments

I do not think there is a reason to suspect or complain about the system. The project is fully Open Source and you or anyone can modify the project and use it, Git has it all over there, anyone can clone a project and make they're own, as they please. I just dont get why everyone complains or puts the project in question. I see the project aaPanel running well, my websites, informations and email accounts are secured. I speak by myself, does anyone got breached? No and thats a fact. The development team is working around the clock to make changes to please us all and improve the system, I lost count of the times people request a feature and gets posted next following week or update, we should be thankfull to the development team behind the project, its not that we dont know who is what, we do, everyone knows who they are, so whats wrong about it... Nothing. It collects stats from users to monitor the development and the performance within they're installations of the system, it does not collect personal and confidential information, I read this over and over in this forum. When we use Google accounts such as the Gmail service, they collect far more informations and I dont see no one complaining about it, they read all your email content, we do not own any right to complain as we use the service we allow them to do as they please, and based on that, they collect far more information and bomb us with products, emails and more that we have never request for. Thats a fact. We, as community members and users of this control panel, should support the project and improve it, I suggest everyone to make a submission to the Git page with the changes you think it can benefit us all and thats about it. Again my "thumbs up" to the development team for presenting and accepting the questions made on this post and looking for a solution to overcome this questions.

TheWormsUnited bro you are not getting the point collecting information is not problem as every app and webapp do this problem is how secure is that data and if its not secure its will get misuses by others

JAY I know perfectly but I found some users posting questions in here and outside this post topic they do nnot speak in the same way, so this is a message to them. They need to understand this too.

About the tracking code of the aaPanel installation script

amarverma

PLEASE HELP ME Understand and Resolve below issue:

When I opened Terminal (on aaPanel dashboard), I noticed below message:

Last failed login: Mon Dec 7 15:29:43 UTC 2020 from 185.153.196.230 on ssh:notty

There were 278 failed login attempts since the last successful login.

And sometime, 278 crossed 20K.

Is it hacker's attack? If so, what steps I have to take.

Thanks.

Trapson

amarverma just change ssh port and make sure the new port is open.

harpreet

What's you track?
Sites, Database, Ftp its only total count or our data also?

aaPanel_Jose

harpreet
Only the quantity will be collected, not the data

aaP_hareeshnarayan1982

TheWormsUnited You don't understand the issue. Even though code is open, installation happened from their own remote url, how can you confirm that they don't add any tracking scripts that can be use for malicious purpose? why cant aapanel team use the original source for downloading things and not from their own non https ur.

aaPanel_Jose

aaP_hareeshnarayan1982
The program installed on the panel was originally designed to be uniformly installed under /www/server. If the default source such as openlitespeed is used, it will be installed in a scattered directory and it will be unmanageable.

« Previous Page