Fasthosts customer? Change your password now
666208
Police called to major hack Exclusive: Fasthosts, "the UK's number 1 web host", has fired off emergency emails telling customers to change all their passwords after police were called in to investigate a major data breach.â¦
760772
(Source: BMC Software) Are you looking for ways to eliminate increasing IT service desk demands? Are you trying to enable users to resolve some of their more basic issues, including password reset, through user self-service? This paper examines the role of password management including support capabilities and solution economics, and demonstrates how BMC&reg; Password Management can consolidate password management issues into one comprehensive incident and problem management application.
185565
Customers in the dark Investigators are racing to establish whether banking information was stolen by the intruder who hacked into a server at Gloucester-based web host Fasthosts.â¦
515933
Evolt.org has a new tutorial posted today concerning something that I still get a lot of questions about - creating a PHP Login System with Admin Features.
87414
A few of my previous columns discussed my vision of creating a more secure Internet. It involved replacing the Internet's default anonymity with pervasive authentication, from the hardware initialization, through the OS and all applications, the user, and ending with a verifiable network stream. It is my strong belief that without a complete overhaul of default authentication, malicious hacking is going to continue indefinitely.
403110
The software giant will partner with a Web 2.0 effort to drastically change how users log into software services. It could spell the end of password woes. In 27B Stroke 6.
719658
(InfoWorld) - If you haven't changed the default password on your home router, do so now. That's what researchers at Symantec and Indiana University are saying, after publishing the results of tests that show how attackers could take over your home router using malicious JavaScript code. For the attack to work, the bad guys would need a couple of things to go their way. First, the victim would have to visit a malicious Web site that served up the JavaScript. Second, the victim's router would have to still use the default password that it's pre-configured with it out of the box. In tests, the researchers were able to do things like change firmware and redirect a D-Link Systems DI-524 wireless router to look up Web sites from a DNS (Domain Name System) server of their choosing. They describe these attacks in a paper, authored by Sid Stamm and Markus Jakobsson of Indiana University, and Symantec's Zulfikar Ramzan. "By visiting a malicious Web page, a person can inadvertently open up his router for attack," the researchers write. "A Web site can attack home routers from the inside and mount sophisticated... attacks that may result in denial of service, malware infection, or identity theft." Once the router has been compromised, victims can be redirected to fraudulent Web sites, the researchers say. So instead of downloading legitimate Microsoft software updates, for example, they could be tricked into downloading malware. Instead of online banking, they could be giving up sensitive information to phishers. At the heart of the problem is the fact that consumer routers ship with simple, well-known default passwords, like "admin," which could be exploited by attackers. "Owners of home routers who set a moderately secure password -- one that is non-default and non-trivial to guess -- are immune to router manipulation via JavaScript," the paper states. The researchers blame router makers for shipping products with "poorly secure default settings." Vendors like D-Link and Cisco Systems are aware of the problem. "It's a concern to us," said Karen Sohl, a spokeswoman with Cisco's Linksys group. "We've shipped about 30 million routers and we want those 30 million customers to understand why it's so important to change [the default password]." Both Cisco and D-Link said they've taken steps to avoid this type of security problem. Over the past few years they've introduced step-by-step "wizard" software to configure their routers, and these products always suggest that the user come up with a unique password. The problem is that the routers still work if the password is left as default. And that's not likely to change anytime soon, according to Michael Scott, D-Link's technical media manager. Users wouldn't buy routers that forced them to enter unique passwords, he said. "That would only result in returned products, and then they would buy one of our competitors products," he said.
559035
Michael Kimsal has posted a formal prediction that a patch, created by someone in the community, will emerge making it simple to bridge the gap between PHP4 and PHP5 applications.   Given the high number of shared hosts still running PHP4, the backwards compatibility issues going from 4->5 (yes, there are some!) and the new PHP4 "end of life" date (8/8/8), someone will likely find a way to make these run together, and possibly even charge money for it.   He suggests that many hosts out there would happily pay a sum to get this kind of functionally for their customers. It would provide a solution to customers who just don't understand the force towards PHP5 and would make them (and their PHP4 applications) happier.
292176
NBC muckraker outed at DEFCON &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
294185
Things are pretty informal at this organization, and network security isn't exactly tight. So when the head finance guy needs a little work done on his network account, IT admin simply asks what his password is.
590366
Virtualized rootkits - Part 2 &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
180369
Companies that have not patched servers against the Windows Internet Naming Service flaw need to act fast, according to a security site.
149334
On the heels of a rant posted by Matt Mullenweg (of Wordpress), Ed Finkler has posted some of his own thoughts and rebuttals to the points Matt made.   Among these points are comments about PHP5 features that "could be helping Wordpress users right now" including:   Parameterized SQL input to eliminate SQL injection attacks Filter extension to combat XSS, CSRF, etc. attacks Prepared statement/transaction support in PDO and MySQLi Improved OOP features and support (code quality, extensibility)   Ed pushes that it's not about the slow adoption of PHP5 in other places. Its about the slow adoption of it in Wordpress so far as it relates to Matt:   The thing is, support of PHP5-only features in WP would give it better speed and security right now. And especially in the case of security, Matt's reliance on what users say they want is a critical error: users don't ask about security until well after it becomes a serious issue. Wordpress has one of the worst security records of any PHP application, so I'll go out on a limb and say that it's a problem now. Even if WP users aren't talking about it, WP's core dev team should have addressed this already.
44699
Bill Gates is right about one thing: asking people to use a two-factor form of authentication would go a long way toward alleviating a lot of the password problems that plague computer security today.
359578
Service afloat despite floods Fasthosts is fully operational despite the continued flooding problems.â¦
147870
InfoWorld - I just love how many Web sites take my complex, hard-to-guess password and make it as easy to crack as guessing my favorite color or the city of my birth. It seems nearly every Web site comes with user-accessible, self-service, password reset questions, and nearly all of those same sites make resetting or obtaining my password magnitudes easier than actually knowing my correct password. Thanks.
6384
We have a few domains hosted on Network Solutions.  For one reason or another we were in a hurry and just used NetSol as our registrar.  BIG mistake!  They are one *pathetic* organization!  They are a DNS company.  That's what they DO!  Their DNS admin only allows 10 IPs. Of course they don't tell you this when you signup.  You only find out that the UI doesn't allow for additional IPs until try to add them.  To add insult to injury when you try to move AWAY from NetSol by changing your primary and secondary they drop your IP configuration immediately.  You're just out of luck if there are clients which have cached your primary and secondary DNS servers.  Now of course the solution would be  ...