Wednesday, 27 January 2016

12 Tips to Protect Your Company Website From Hackers


Making your website live is like unlocking the door to your premises with your office and safe open: Most of the people who visit your physical building will never even know that all of your data is there to discover just by walking in. Occasionally you will find someone with malicious intent who will walk in and steal your data. That is why you have locks on doors and safes.
Your website is just the same, except that you will never see anyone come in unless you have protection systems in place. Electronic thieves are invisible and fast., searching for your website for details of customers’ accounts, especially for their credit card information. You have a legal obligation to protect this data from theft and to report security breaches that occur.

12 Tips to Protect Your Company Website From Hackers

12 Tips to Protect Your Company Website From Hackers

ASP.NET 5 is no longer. Introducing ASP.NET Core 1.0 and .NET core 1.0 .

There are only two hard things in Computer Science: cache invalidation and naming things. - Phil Karlton

It's very easy to armchair quarterback and say that "they should have named it Foo and it 
would be easy" but very often there's many players involved in naming things. ASP.NET is 
a good 'brand' that's been around for 15 years or so. ASP.NET 4.6 is a supported and 
released product that you can get and use now from http://get.asp.net.

UPDATE NOTE: This blog post is announcing this change. It's not done or released yet. 
As of the date/time of this writing, this work is just starting. It will be ongoing over the next 
few months.

However, naming the new, completely written from scratch ASP.NET framework 
"ASP.NET 5" was a bad idea for a one major reason: 5 > 4.6 makes it seem like 
ASP.NET 5 is bigger, better, and replaces ASP.NET 4.6. Not so.

Refer form:
http://www.hanselman.com/blog/ASPNET5IsDeadIntroducingASPNETCore10AndNETCore10.aspx

ASP.NET 5 is dead - Introducing ASP.NET Core 1.0 and .NET Core 1.0

For Security of your Website 10 Tips

https://blog.sucuri.net/2015/06/10-tips-to-improve-your-website-security.html

10 Tips to Improve Your Website Security


In recent years there has been a proliferation of great tools and services in the web development space. Content management systems (CMS) like WordPress, Joomla!, Drupal and so many other allow business owners to quickly and efficiently build their online presences. Their highly extensible architectures, rich plugin, module, extension ecosystem have made it easier than ever to get a website up and running without years of learning required.
This is undoubtedly a great thing; however, an unfortunate side effect is that now there are many webmasters who do not understand how to make sure their website is secure, or even understand the importance of securing their website. In this post I want to share with you the top 10 steps all webmasters, website owners, can, and should, take to keep their website secure.

1 – Update, Update, Update!

This is something we cannot stress enough here at Sucuri. Countless websites are compromised every day due to the outdated and insecure software used to run them. It is incredibly important to update your site as soon as a new plugin or CMS version is available. Most hacking these days is entirely automated, with bots constantly scanning every site they can looking for exploitation opportunities. It is not good enough to update once a month or even once a week because bots are very likely to find a vulnerability before you patch it. Unless you are running a website firewall like CloudProxy, you need to update as soon as updates are released. If running WordPress, I personally recommend the plugin ‘WP Updates Notifier‘ – it emails you to let you know when a plugin or WordPress core update is available. You should also follow @sucuri_security on Twitter to get notified about important updates and security warnings.

2 – Passwords

Working on client sites, I often need to log in to their site/server using their admin user details. I am frequently disturbed by how insecure their root passwords are. It is a little scary that I have to say this, but admin/admin is not a secure username and password combination. If your password appears in this list of most common passwords, it is guaranteed that your site will be hacked at some point.

Friday, 15 January 2016