• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

Input My 80s Collection - Spyware?

johnmack

New Pleskian
Just updated this morning after your security email out - and I have to ask what on EARTH were you guys thinking? Is this spyware?

This looks like the panel has been hacked, apropos of nothing I have an icon hovering on top of my settings in some 8 bit art fashion with a stupid "collect the stickers" game?

Whoever thought this was a good idea should be on coffee duty only and not allowed access to a terminal ... ever!

The immediate assumption is - poisoned update injection - thankfully I was able to find it and globally disable before any clients saw it, because it doesn't take a PHD in psychology to know that if a less technical reseller sees this and thinks they have done something to get their account compromised, they will immediately panic and start trying to "fix it" on their own.
Likely causing untold issues.

In a world where security is a constant worry for sys admins, intalling something without any preamble like this instantly plucks on the string of hack concern and I cannot understand who would ever have green-lit such a completely unnecessary and out of place "feature".

Do not ever install garbage like this and turn it on unannounced on my servers on a paid service that is supposed to be both professional and secure. It smarts of spyware, and to be frank, it dunks my trust in your product vision right into the toilet.
 

Attachments

  • Screenshot 2026-08-07 at 09.39.01.png
    Screenshot 2026-08-07 at 09.39.01.png
    993.6 KB · Views: 7
After reviewing the collective feedback from our community, our Product team has decided to disable the anniversary sticker feature by default. The change is being rolled out, and by Monday the stickers will no longer appear on Plesk servers.

We appreciate everyone who shared their thoughts and helped us reach this decision.

If there's anyone who would still like to keep the stickers, you can re-enable the feature by adding the following to panel.ini:

Code:
[product]

noFun = false
 
I think a more appropriate line for panel.ini would be

[product]

nofunatmyandmycustomersexpense = false


I realise it's now very fashionable in corporate circles to have nothing but contempt for those loyal customers (since 2003 in my case), and to never apologise and never explain.

Am I 100% in alignment with the comments of @johnmack I immediately disabled the feature myself at 2am last night, but one I missed, seriously alarmed a loyal customer of mine since 2005.

How dare you!
 
We got several complaints from (our remaining) Plesk server owners about this as well.

Please keep, what is left of Plesk, serious please. It's not Freeware or Open Source and customers are paying for a serious product. Not some bloated version of Plesk. Better keep on point and check for CVE's as of late.

Thank you.
 
I don't know, I think it's fine, a lot of companies has silly things like that. Life's too short to take things seriously all the time but I and plenty others understand though that some people just don't like having fun.
 
I don't know, I think it's fine, a lot of companies has silly things like that. Life's too short to take things seriously all the time but I and plenty others understand though that some people just don't like having fun.
each folk is entitled to their opinion for sure, but imho secure hosting is not the place for unannounced "fun"
i also don't consider a fisher price pointless click the icon task sitting on top of my control panel paticularly "fun" but to each their own.
 
@scsa20

I hope Plesk will rise their pricing again in October, like every year, with 500%. That will be really funny!

Edit: sorry wrong quote.
 
I don't know, I think it's fine, a lot of companies has silly things like that. Life's too short to take things seriously all the time but I and plenty others understand though that some people just don't like having fun.
Let's see how much fun it is when your server is completely hacked (at root level) and the hacked just wanted to have some fun as well. I think you will be rolling on the floor laughing right? Life seems to be all about fun with you. ;-)
 
Back
Top