000Webhost Loses Plaintext Passwords

000WebHost

This comes under the heading of “know who you are doing business with.”  Web hosting company 000webhost.com was breached this week and over 13 million customer records were stolen and posted for sale on the Internet.  The data includes customer names, emails and passwords in plaintext  (meaning the passwords were unencrypted).  Storing passwords in an unencrypted form should be a criminal act in itself, ...

Continue Reading →
0

When Bad Things Happen To Good Web Sites

website-securityToday we are going to take a deeper dive into the subject of website security.  Web servers can be  breached in a number of ways, but the most common is simply stealing your user ID and password, either through a clever spearphishing email, or an automated brute force password cracking program.  The second most common way is through software vulnerabilities in the web site code itself that opens it up ...

Continue Reading →
0

WordPress Security Tips

WordPresslogoAs we have mentioned in previous postings, WordPress has become one of the world’s leading web design tools, with a 27% share of all web sites, and a 65% share of CMS or Content Management System type websites.  Because it is an open source product that is free to use, it has become hugely popular.  We have been designing in WordPress ourselves for ...

Continue Reading →
0

WordPress Site Owners – Update Now

WordPresslogoJust a quick note to my WordPress pals – the latest update, WordPress 4.2.3, has an import fix for a cross site scripting (XSS) vulnerability that leaves your site vulnerable to attack.  According to Sophos:

“The flaw allows WordPress users who have Contributor or Author roles to add javascript to a site (something normally reserved for Editors and Administrators) using specially crafted shortcodes.

Attackers ...

Continue Reading →
0

Have a WordPress Site? Better Secure It!

WordPresslogoWordPress has become an incredibly popular web design platform, and currently has about a 25% share of all web sites on the Internet.  As an open-source software product that is free to download and use, with a great support and documentation through WordPress.org, and a huge, international development community providing an endless array of themes, plug-ins and widgets, it is easy ...

Continue Reading →
0

We Are Moving Our Web Site to WordPress

This is our first post on the new platform.  Mainly we are developing this site to provide a place for us to refocus our web presence on our new business specialty: computer, network, and web security.  This will also let us combine our website and blog at one site.  So eventually the posts at WyzGuys Tech Talk on Blogger will be imported to this site.

My friend and business associate Troy king of King Web Design will be providing ...

Continue Reading →
0
Page 3 of 3 123