This week I’ve been asked by two clients to add password-protected membership areas to their websites. In one case, the client wants to create a members-only area containing paid content. In the other case, the client wants a highly secure…
A few weeks ago in this blog, I wrote about WordPress 4.7 and the new REST API. I wrote: As someone who has been in the security space since the early 1990’s, my first thoughts are about the potential security…
You may be familiar with Amazon S3, providing low-cost online storage. You may also be familiar with Amazon EC2, providing the ability to have your own server in the cloud. These two form a small part of a collection of…
Many web hosting companies seem to go through a cycle: They do everything right and deliver great service. They grow. They gain a reputation as being outstanding. They grow some more. The get acquired or go through some sort of…
I hate it when a vendor of a product I use starts throwing FUD (fear, uncertainty, and doubt) around, but I've been in the security and cryptography space since the early 1990's and know that pissing matches are common. Today…
Everyone who has a blog that accepts comments struggles with SPAM comments. Google's reCaptcha has been around for a while, and there is a WordPress plugin that impliments it well: ReCaptcha in WP Comments Form. We are deploying it thought…
Yesterday the servers of Dyn, a major DNS host were the victim of a Distributed Denial of Services (DDoS) attack. If your web hosting company's DNS servers are attacked there is not much the average website owner can do. On…
Yesterday one of the providers of WordPress Security plugins published an article on their blog about cloud-based Web Application Firewall and a particular attack vector. With a remote firewall, you change your DNS records so they point to the firewall.…
Our clients tend to me high-profile successful entrepreneurs who would rather spend their time making money and growing their businesses than dinking with their websites. For example, I'll bet you compose your blog posts in MS-Word, and then copy-and-paste them…
We acquired a new client this week whose previous webmaster died and took all the website access information to his grave. This happens more often that you'd imagine. Fortunately, most web hosting companies, domain name registrars, etc have dealt with…