RailwayReviews of railway.com

On October 21, Railway told all users an attacker had broken into the systems that hold customer environment variables, and had walked off with decrypted secrets from some accounts. Database passwords. Payment keys. API keys... Their advice: rotate everything, immediately. In the same breath, they froze every deploy on the platform!!! On Railway, a new secret only reaches your app through a deploy. So they handed us a fire and took away the extinguisher. We could leave a possibly stolen database password and live Stripe key open to whoever had them, or break our own product on purpose. We broke it. Checkout, email and our bot went dark, by our own hand, because our host left us no other move. Then we left. New Dockerfiles, a new host, and around 25 credentials regenerated across a dozen vendors, all in about a day, all because Railway couldn’t keep one list of secrets safe. If anything you run touches real users or real money, run from Railway. NOW. We already did.

Oggi con la tecnologia a disposizione, è facile mostrarsi grandi aziende ed essere due appassionati dietro un logo che in un momento di difficoltà mostrano tutta la loro piccolezza. Ecco, questo è successo a Railway, piccoli incompetenti che non forniscono assistenza ad un cliente "pagante". Se non siete in grado di fare un mestiere, non fatelo, non chiedete soldi e sopratutto, non vendete un servizio e una professionalità che non avete. Ovviamente sono già andato altrove, non per l'incidente che può accadere, ma per la vostra mancanza di assistenza clienti, nessuna risposta alle mail o alla vostra inutile community help, per un cliente ripeto: "pagante".

I migrated over from another host because from time to time they would be down. And I couldn't have that with commercial client sites and my own commercial sites. So I chose Renderway, and it seemed really good, but they're down all the time, and latest they've just been hacked. And I had credits used from Claude, from OpenRouter, and from Gemini, and from OpenAI. So it cost me money, and it took me a long time to migrate the sites over to another host. Their security is atrocious. Their service is atrocious. Their support email doesn't even work anymore. This site is down all the time. This won't be the last. The last big one, they were supposed to invest in infrastructure, and everybody was cheering them on, sort of the underdog. But it's happened again. So they've been down for like two or three days now. That's not acceptable.

At first, I was really impressed with the service, but after three days of being unable to deploy anything and getting nothing but “please wait,” I'm starting to lose my motivation to use it. I understand that higher-paying customers may get priority, but I feel like I'm being treated as a second-class customer. Not even a discount or any form of compensation has been offered for three days of downtime that have disrupted my work. As soon as I can, I'm moving to another platform.

2 days out of the week it would be down due to some issue. As of right now its been down for the last 2.5 days straight. they also leaked by encrypted env variables while they got hacked; I mean how does that even happen ? Seriously . I got charged a lot of bill on my API keys due to their security issues.

Railway disclosed that an unauthorised third party may have obtained decrypted customer secrets. What protection did encryption actually provide, and how was that protection defeated? This demands a detailed explanation. We revoked our credentials immediately—then couldn’t apply replacements because deployments were paused, leaving services broken. Emergency credential updates should not depend on a full rebuild or be blocked by a deployment freeze. A failure to protect secrets, followed by a failure to let customers recover, is unacceptable. We’re moving elsewhere. Source: railway latest blog - security breach

Ho una piccola azienda e non posso fare causa per il danno fatto. Spero lo facciano le grandi compagnie e vi facciano fallire dopo aver recuperato fino all'ultimo centesimo

planté depuis 24h... drole de service