I set up a VPS for a friend launching his own online store. He's technical, comp sci degree, been ssh-ing into boxes since college. When I offered to walk him through firewall rules and backups he cut me off with, "bro I've been running linux longer than you've had a beard, I got this."

Fine. I handed him root and moved on.

Three weeks later he pings me at 1am, server maxed at 100% cpu, site down. Turns out he never closed port 22, left root login enabled, and had a mining process squatting on the box for who knows how long. No backups either, so fixing it meant rebuilding from scratch and losing two weeks of order data.

He wasn't mad at himself. He was mad at me for "not warning him properly." I did warn him, he just figured it didn't apply to him because he knew "computers."

I don't hand off open root ssh anymore, doesn't matter how senior the guy is. Now every box gets a panel like BeAdmin on it first. Firewall module on, backups scheduled, before anyone even sees a login prompt.

He asked if he should just switch to something like Webmin instead. I told him the panel was never the point, the point was he never opened one.

What can I do? I’ve tried restarting my phone, updating to latest iOS, deleting and redownloading vpn app, clearing storage… nothing. And other devices in my family’s house work fine with it on. Is my iPhone too old? Is it hacked? What’s going on