Web Hosting Geeks' Blog » encryption

Bit-Defender Internet Security Review

Art — Mon, 28 Nov 2011 12:34:06 +0000

It’s that time of year again, all of the various security suites are coming out with their 2012 versions and redoing interfaces and making it all bigger, stronger and faster. Of course, Bit-Defender is no exception to this rule. As we begin to evaluate our internet security options for this year, we can certainly see that this program, while a bit on the touchy side, may possibly be a way to turn.

Changes, Changes

The interface will be one of the places where you begin to see the wide host of differences that have been made with this year’s edition of Bit-Defender. Now showing a dark minimal interface that lacks the options of the past for their intermediate and advanced options panels, they have cut down on clutter and chaos by deciding for you which options you need available right at hand. You can, of course, change this in the options panel and make sure that you have your advanced tools there as well, but starting out, this is it. However, finding the menu to do so if you choose to change these options might prove a bit tedious and confusing.

While definitely lower priced than its competitors, the thing that their competitor has that this program lacks is the ability to install alongside or with other security programs also installed. Bit-Defender is so anti-social that it will refuse to install when there are even any remnants of other security sources installed. So it is recommended that you use an uninstall sweeper program to make sure that every last bit of your old security and anti-virus programs are gone first or install only on a fresh computer, otherwise it simply will not install.

Some of the new tools that have been added include:

Chat scanners
Phishing protection
Firewall
Parental Controls
File encryptions
System optimizer
Online backup

It is safe to say that while other programs offer these kinds of tools, they do so at a much higher price and a much longer installation time. With install time (and this includes registration) clocked at just under 2 minutes, Bit-Defender definitely has the market cornered on efficiency.

Interestingly enough, Bit-Defender now has an application that is also free for all FaceBook users: http://apps.facebook.com/bd-safego/. Having tried this little application, we definitely would have to say that it is non-invasive and trustworthy having caught and filtered out the infamous “Facebook Pornography Spam Attack” of last week. That little catch in and of itself was quite impressive!

Does not play well with others

Once installed, Bit-Defender does a preliminary scan and makes certain that it is not being put on an already infected machine (sorry, you folks who bought this as the answer to your virus problem, no go, here). Then, you can go into choosing one of many levels of scans available for your needs from the basic levels to the highly paranoid. Best to make sure you read the help files about the one you chose though. If you do not currently have time for a forced boot time scan, you need to choose full, not complete, or you will wind up having to do this tedious bit of work.

Once uninstalled, you’d think that a program so anti-social would make sure to clean up after itself, but unfortunately this is not the case with Bit-Defender and is perhaps our biggest issue with it. When the program is uninstalled it leaves behind traces in your registry that will need to be fixed in order to ensure proper running of your machine or of any other security program that you might choose to install. Once you uninstall the program, you should, to be safe, make sure that you use a registry fixing tool in order to ensure the health of your machine and its proper running.

All in all, if you can put up with the quirks of this program or you are installing it on a brand new, just built system, then you will be in heaven with this program and it’s relatively small cost. The tools that it offers are indeed extensive and will protect your computer from even the harshest of viruses and malware.7. However, if you are looking for help for an already infected machine, best to look elsewhere for the program that will best suit your needs.

Secure Shell Security Tips

Art — Thu, 04 Aug 2011 18:26:56 +0000

Secure Shell or SSH is a security measure that was designed to protect websites from external threats. In the past, users would connect to their servers using Telnet. Now that servers a no longer just down the hall, SSH adds an extra layer of encryption to the transmission ensuring you will be able to connect to your equipment with little risk. SSH is much more secure than Internet protocols but there are ways to improve the security.

Install Brute Force Software

Web attackers utilize Brute Force Detection software to reveal your password and create havoc for those on the server. At the same time, the software can be used to neutralize attempts as soon as they begin.

Establish the Timeout Interval

Another important method is to set the timeout interval in the SSH configuration file. This will allow you to establish the amount of time users remain logged in. After that time the user will automatically be kicked out, even if they forget to logout. This keeps the server clean and prevents cyber criminals from sneaking into user accounts that are always logged in.

Restrict Root Logins

To further increase security, never allow root logins to your server. The system administrator should be the only individual with access to the root. There is never a reason to risk your root account by directly exposing it to the Internet. When these logins are restricted, hackers will have a difficult time gaining access even if they uncover the password.

Require Secure Passwords

As the system administrator, you have the ability to set the required password strength. Therefore, requiring a mixture of capital and lowercase letters with numbers is critical to protecting the accounts on your server. Furthermore, it is vital to demand the periodic change of passwords.

Quarantine Users in Chroot Directories

The final tip to a more secure server is to utilize chroot which restricts users to their own home directories. Linux server does have configurable permissions in place to thwart a regular user from deleting all files or some other crazy action. However, these users will still be able to see the files. Therefore, chroot completely restricts the viewing of files on the server.

Secure Shell security is an excellent layer to add to any server. At the same time, the aforementioned tips will make your server much more secure resulting in difficulty for attackers to access and take command of the equipment.

Locking Your Online Business Using Website Encryption

Art — Fri, 21 Jan 2011 02:06:07 +0000

For business owners leaving the doors to their stores wide open without proper security measures in place is no different than online business owners leaving their websites vulnerable to looters and thieves.

If You Build It, They Will Steal

The act of stealing website content is becoming such an issue that it’s now commonly referred to as “website hijacking.” This increasingly sinister phenomenon is most detrimental to e-commerce website and other online business ventures.

As a business owner with an online venture to ensure that your website is protected against outside elements, encryption is the solution. Encryption allows you to “lock up” the essential components of your website that you may not even realize are exposed to cyber thieves.

Typically, there are three main reasons website content is hijacked:

To harvest e-mail addresses for spam purposes
To copy design and layout content and code
To reveal and/or steal payment method links to be circumvented/stolen

Harvesting E-mail Addresses

It’s a global consensus that spam is excruciatingly annoying. It’s even more of a nuisance when spam bots stealthily invade your website with the intentions to seek information, steal e-mail addresses and destroy your company’s reputation simply by storing hijacked e-mailed addresses in a database with malicious intent to flood customers with spam.

While many tech savvy customers are able to distinguish between spam scams and legit e-mail messages; unfortunately, for many others, they unknowingly fall prey to costly scams. Each year millions of dollars are embezzled when cyber criminals steal customers’ credit card information and identities are snatched by manipulative spam e-mails forwarded to e-mail addresses obtained by website hijacking.

Spam is not only an issue for customers, but it’s an even greater headache for business owners. Spam is also responsible for:

Loss of productivity for your staff;
Loss of valuable server resources;
Loss of revenue when important e-mails get lost in the shuffle.

Copying Design and Layout

Setting up your web host account and website requires many resources including time and money. Although it takes days, if not weeks to complete the initial setup, however, you may be surprised to learn that it takes less than five minutes for your website content and source code to be hijacked with just a few simple mouse clicks.

Online entrepreneurs soon discover the answer if they don’t “lock up” the doors to their website’s content. Open HTML source code is easily accessible with a few clicks, and the process of hijacking is as simple as copying, and pasting. Often Java Scripts are installed to thwart potential cyber thieves from lifting code as the scripts block code from being viewed; however it’s only the first step as it doesn’t protect from software based queries.

Pocketing Payment

Not only can a thief steal credit card information from customers; thus tarnishing your reputation, hackers can also alter your source code diverting payments to their own accounts, leaving you a responsibility to provide products or services to your customer without receiving payment. Encryption is a definite necessity in any online business venture, especially when protecting customers’ credit card information

“The Lock”

By using available software tools to encrypt website code prevents information from being hijacked. Encryption is extremely effective against all types of informational breaches, including software queries and spam bots. The idea being, even if thieves access the source, the code will be indecipherable.

Basic HTML encryption tools are readily available online for free. For novices, encrypting may sound complicated, however, it’s relatively quite simple. Once you find an online HTML encryption tool, simply copy your existing code into the tool and it generates a secure encrypted code within minutes.

The Overlooked Connection Between Computer Viruses and Site Security

Art — Fri, 24 Dec 2010 19:58:54 +0000

Most site owners are very paranoid about the possibility of their site being stolen or hacked, and are therefore insistent on using a web host that utilizes top notch encryption technology and other security measures. For a web host, a single lapse in security can result in the loss of entire networks for days at a time, so the level of security upheld is very high. In fact, there are governmental organization that regulate the security measures used by web hosts and mandate certain levels of security be maintained at all times. All of this makes the web hosting industry pretty safe in regards to fending off hackers. However, most people don’t realize that the security of their own computers hard drive plays an incredibly important role in the security of their web sites and hosting account.

The following information discusses the connection between computer and web site security, while also providing tips on how to ensure the safety of both your computer and your hosting account.

How Hackers Get Passwords

Contrary to popular misconception, hackers do not spend their time trying to compromise the integrity of massive web hosting networks in order to take control of entire servers,. Instead, they use thousands of individuals ‘drone’ computers to complete tasks like this for them. These computers belong to people that have installed the hacker’s malware on their computer. The malware consumes the computers resources for nefarious purposes, essentially creating a networked super computer out of a bunch of hacked computers. Of course, this in turn makes the computer slow in many cases, but not always.

Sometimes the hacker does not want to use your computer for hacking – they actually want your passwords. They obtain them by hiding a keylogger on your computer, which records every keystroke you make, in conjunction with your browser history. This allows the hacker to access your web hosting account, change the account’s email address and completely steal all of your domains overnight.

How to Avoid a Security Breech

The only way to keep the above scenario from happening to you is to keep powerful and proven antivirus software running ion your computer at all times. Since hackers find new ‘exploits’ and develop new malicious software on a daily basis, it is important to make sure your anti-virus software is updated on a routine basis. Fortunately most anti-virus software will perform automatic updates and handle the security of your computer on autopilot. It is also important to note that all anti-virus software are not the same, and most free anti-virus software are not adequate to provide complete protection.

What to Do After You’ve Been Hacked

Luckily, most people recover their domains and web hosting account by calling the hosting company and providing the necessary information, After recovering your information or domain it is imperative to change all of your passwords, potentially reformat your computer, and install an anti-virus software with active protection. Choose a new password that contains plenty of symbols, letter and numbers in order to make it harder for hackers to steal. Change your email addresses and any other basic online communication methods so that the hacker cannot track you down and begin harassing you again out of spite.

Selecting a Suitable eCommerce Plan – Key Features

Art — Tue, 23 Feb 2010 16:49:12 +0000

Everyday more business owners are taking their brick and mortar businesses to the internet for maximum exposure and increased profits. Many of them are under the impression that running an online business will be extremely simple, however this is not the case, especially when initially entering the online marketplace. Maintaining an online business is relatively simple compared to a storefront, however setting up an online business with very little experience can be a challenging task in and of itself.

Beginning an online Business

With a brick and mortar business, the main challenges presented involve initial investments, whereas the establishment of an online business requires less investment and more decision making. In the online world, decisions are the biggest investments you’ll make. As soon as you begin your first online endeavor the decisions and question asking begins – What do I want the website to look like? How am I going to list the products? In which way am I going to market the products? All of these obvious question com to mind fairly quickly, however the novice will often overlook one fundamental question – Which eCommerce web hosting solution am I going to use? Comparing the following attributes will help you make that crucial decision.

Security

The single most important attribute an eCommerce solution can have is security. When dealing with credit card numbers, bank account numbers, and other sensitive information online on a daily business, it is absolutely imperative to secure this info. The internet is a very dangerous place, crawling with hackers and cyber criminals looking to steal anything they can get their hand son. To prevent yourself from becoming the victim, you’ll want to make sure your eCommerce plan offers top-of-the-line encryption services such as SSL, as well as fully functional firewalls and anti-virus programs that scan your web applications.

Reliability

The next factor to consider would be reliability. Running an online business is all about providing customer convenience. In fact, the main reason why consumers choose to shop online rather than go to the store is convenience. Offering your customers maximum convenience means providing a stable and convenient website. If your eCommerce hosting plan is unreliable, then your site will be plagued with crashes and poor performance on a regular basis. Make sure you look for packages with unlimited features, such as unlimited bandwidth and server space. Customer reviews will also help you decide which plan would be the most reliable.

Support

Another attribute that is closely related to reliability is support. Users that are just beginning an online business will need a competent support staff ready to handle their problems at all times. As an online business owner, you’ll inevitably face many problems as you learn the ins and out of eCommerce. To simplify this learning experience you’ll need a good support staff by your side. Make sure the service you choose offers 24 hour support, and can be contacted in a variety of ways. Perhaps the best way to gauge the support capabilities of a company is by reading reviews and calling the support staff yourself.

SSL vs. TLS: Which Provides the Best Protection?

Art — Mon, 30 Nov 2009 19:22:01 +0000

SSL (Secure Sockets Layer) and TLS (Transport Layer Security) are two security protocols that provide encryption and authentication between applications where data travels over an insecure network such as the internet. While the terms are often used interchangeably, one is actually the successor to the other. In fact, SSL 3.0 laid the foundation for the first version of TLS, which is why it is sometimes called SSL 3.1. Let’s take a closer look at these protocols to see if we can determine if one is better than the other.

Similarities and Differences

SSL and TLS differ in such a way that they are actually inoperable with one another. However, they are essentially equal in terms of the level of security they provide. For instance, both can ensure that your data is protected with reliable encryption when traveling over the internet. They also make sure the server you are communicating with is the one you intended to contact and not a middle man eavesdropping on your transactions. This is because any server with SSL or TLS installed must also be equipped with certificates issued by a third-party CA (Certificate Authority) such as Thawte or Verisign. These certificates essentially verify that the website actually belongs to the domain name owner and server.

The main difference between these two protocols is that an SSL connection starts out by applying security and then proceeds into secured communications while a TLS connection does not. TLS actually begins with an insecure “hello” to the server. It only proceeds into secured communications after a successful handshake between the client and server. Should the handshake fail for any reason, TLS will not create a connection of any sort. Despite this significant difference, SSL and TLS both make fine options for security. You really can’t go wrong with either.

The TLS Advantage

There are reasons to choose TLS over SSL, and the most significant relates to how it was developed. TLS is based on open community standards, which makes it far more extensible and more likely to be supported in the future. Perhaps the most unique advantage of TLS is that it is backwards compatible, which basically means that it can be scaled to secure client side connections that only support SSL. Another distinct benefit is that TLS permits secure and insecure connections over a single port, while SSL designates one port for secure connections only. Even this factor does not make either any more or less secure than the other.

When it comes to SSL or TLS, what you need to know is that by not using either, the communications between you and another server can become the party line for eavesdroppers and cyber criminals. The data contained in your email, login screens and even financial transactions will be delivered across the net in plaintext for all to see. In addition, there will be no way to ensure that the server you connect with is valid and not just an interloper or middle man setting you up for the fall. Therefore, it would be wise to adopt either of these protocols to keep your communications private.

Securing Your Business Website in Three Easy Steps

Art — Fri, 17 Jul 2009 17:29:27 +0000

Whether it’s the local shopping market, airport or online, thieves are lurking and just waiting for you to make a critical mistake. In fact, much of the internet community is in a state of panic as data theft is at an all-time high. Credit card numbers, bank account information and identities are being stolen from companies who don’t know how to properly secure their website and transactions. Assuming you don’t want to be the next victim, we have provided three simple tips to keep you one step ahead of the attackers.

1.) Make Use of Encryption

In order to protect the monetary transactions occurring on your site, you at least need to have an SSL certificate with no less than 128-bit encryption. This security tool can be installed and managed by a third-party vendor such as VeriSign or you can choose to handle the configuration yourself. What SSL does is scramble the data being sent over the internet in a code that is unreadable to hackers. Thus, when sales on your website are made, the financial details of your customers is encrypted, securely transmitted and then decrypted by your payment processor. By placing an SSL certificate seal on your website, you can calm the nerves of consumers and encourage them to shop your store in confidence.

2.) Check Your Buyers

Although you don’t want to look as if you are suspicious of everyone, the prevalence of credit card payments increases the probability of a customer using someone’s financial information without their knowledge or approval. To minimize situations like this, you should check the identity of your customers. This can be done by not only obtaining their name and credit card number, but also their home address, telephone numbers and the security code located on the back of the actual credit card. By doing so, you can better assure that the financial details submitted actually belong to the individual making the purchase. If the card comes back as stolen, you could end up playing a role in helping authorities track down the criminal.

3.) Research Your Merchant

To ensure that financial information will not be stolen following the transaction, it is imperative that you run a thorough check of the merchant account provider processing your credit card payments. You can start by reading reviews to learn if they have a history of fraud or security issues. Don’t hesitate to speak to the company directly about the security measures they employ and most importantly, to make sure you are completely confident in their services. If you have any doubts about the provider, follow your instinct and move on to the next option.

Security is a hot topic in seemingly every industry these days. If you are using the internet as a medium for your business, these certainly are not times when you can just sit back and simply hope for the best. Hackers and their attacking mechanisms grow more advanced everyday, so it is critical that you take the appropriate actions to keep both you and your customers out of harm’s way.

SSL For Your E-commerce Site

Art — Fri, 06 Mar 2009 18:55:02 +0000

With credit card fraud and identify theft on the rise, consumers are more cautious than ever about shopping online. If you are running a store online, this means that potential customers are more reluctant to buy products and services from your site. In order to boost consumer confidence and make them feel safe, you need a reliable security mechanism that keeps their personal information secure. What you need is an SSL certificate.

What is an SSL Certificate?

Secure Sockets Layer or SSL, is a security protocol that enables encrypted communications between the customer’s web browser and the server your store is hosted on. This is accomplished by what is known as a handshake, a process where the server’s identity is confirmed and a secure connection created. SSL typically offers 128-bit encryption, formulated by an algorithm which generates a key that is virtually impossible to crack. An SSL certificate shows that your site is secure and safe for shopping.

How to Get a Certificate

SSL certificates are offered by entities known as Certificate Authorities, with the most popular being GoeTrust, Thawte and Verisign. For the most part, these authorities provide certificates that give you the same level of security. A single certificate can encrypt the data traveling between the server and each of your customers’ web browsers. The average online storefront can get adequate protection from a basic SSL certificate. You also have the option to purchase additional services to strengthen the level of security.

Installing the Certificate

Although many web hosting providers offer SSL certificates as add-on products, you typically have the freedom to incorporate one purchased from a third-party vendor as well. In most cases, you can learn how your SSL certificate is to be installed via the instructions in the control panel software or by contacting the host’s technical support department. Some of the most advanced control panels even allow you to incorporate an SSL certificate directly from the interface. Once installed, the certificate is automatically enabled. You will know it is activated when noticing “HTTPS” in front your URL rather than “HTTP”.

Designing for SSL

The design of your site is very important when implementing an SSL certificate. In order for your web pages to be viewed as secure, all scripts, graphics and media elements must be deemed secure as well. You have probably visited web sites where a warning displays stating that some of the elements of a particular page are not secure. These messages are prompted when external elements of a web page are not called using the HTTPS protocol. In many cases, the certificate is valid and secure but the page isn’t designed properly for SSL. All the external elements of your page must be called using links that include the full URL. One simple graphic that doesn’t use HTTPS will generate a “not secure” error.

Conscious online shoppers are increasingly looking for SSL certificates and if you don’t have one, you are missing out on a lot of business. You can have some of the most beneficial products online but if no one feels safe buying them, they will hesitate to proceed with the transaction.

The Insecurity of the Open-source CMS

Art — Fri, 19 Dec 2008 20:08:17 +0000

Open-source content management systems are incredibly popular these days. Unfortunately, one issue that has always plagued this type software is security. On the surface, it would seem as if open-source software is more secure than commercial products based on the reported number of security vulnerabilities and activity in the community. However, this is far from the truth and a misconception that has resulted in trouble for many website owners. With a proprietary solution such as the Microsoft Content Management Server, you are generally provided with support and insurance against security flaws. With open-source solutions, you are forced to rely on the support of the software’s developers and user community which means that nothing is guaranteed.

Elements of CMS

The open-source CMS consists of various elements, many of which contribute to vulnerabilities. The average software includes add-on modules, encryption mechanisms and a plethora of scripting errors. These elements can simply be a part of a certain product or included into the entire system. Completely securing such an application on a web server is no easy task. All publicly accessible server applications are designed for around the clock availability, providing access to visitors and attackers alike. Without the proper security implementations, an open-source CMS is essentially wide open for an attack.

Insecure software can inflict a significant amount of damage, especially when it comes to a program as functional as a content management system. When vulnerabilities in such software are exploited, the best result could be the defacing of your website. The worst case scenario would be the exposure of sensitive data that blemishes your credibility and possibly ruins your business. There have been various reported instances where vulnerable systems resulted in the leakage of Social Security numbers, credit card details and other personal information.

Joomla, Drupal and other CMS Targets

It is no surprise that some of the most widely used open-source content management systems such as Joomla and Drupal are among the most targeted on the web. The fact that the source codes of these systems are freely available and have numerous installations make them a prime target. While the average visitor can’t distinguish between a commercial and open-source product, they tend to be easily identifiable to attackers. A simple web browser along with the viewing of URLs and HTML patterns in search engine results can give a hacker all the information they need to strike.

One of the most attractive aspects of the open-source CMS is that you can customize and actually own a particular product. On the other hand, because the software is originally developed by someone else, it is very likely that there are a few things you don’t know about the program, meaning you can’t ensure security after making changes. This is why many open-source systems include disclaimers against third-party modification as well as the overall security of the software, basically telling developers to use at their own risks.

With so many people handling the code, it is unpractical to think that any open-source CMS will ever be 100% secure. The best thing you can do when relying on these solutions is to understand the risks, make sure you are using the most recent versions and design your web pages with caution. Attackers are persistent but not nearly as powerful when their methods of attack are limited.

Web Hosting Geeks' Blog » encryption

Bit-Defender Internet Security Review

Related posts:

Secure Shell Security Tips

Related posts:

Locking Your Online Business Using Website Encryption

Related posts:

The Overlooked Connection Between Computer Viruses and Site Security

Related posts:

Selecting a Suitable eCommerce Plan – Key Features

Related posts:

SSL vs. TLS: Which Provides the Best Protection?

Related posts:

Securing Your Business Website in Three Easy Steps

Related posts:

SSL For Your E-commerce Site

Related posts:

The Insecurity of the Open-source CMS

Related posts: