WebProWorld IT Forum

server problems
The clock on our forums keeps going forwards 12 hours, always at the same time 9.35 pm it suddenly says 9.35 am the next day, this means that all the posts from then on are dated incorrectly and all the guests/members show on the forum as being online!!

restricting internet access in WinXP?
I have a client who just asked me for a simple way to stop some of the computers on his network from accessing the internet with IE? He's running WinXp and my lo-tech solution of unpolugging the network cable is no good because they use VOIP.

Issue with 3 Windows 2000 Pro computers
I'm trying desperately to bandaid a network together for a client out of three Windows 2000 Professional machines in a peer-to-peer networking configuration, all plugged into a Netgear switch...



Recent Articles

Rough Week For Firefox Team
It probably hasn't been a fun week over at the Firefox team: News.com: Coding misstep forces new Firefox release. Links: Coding misstep forces new Firefox release.

What is the Point of Encryption if you Don't Know Who For?
Phishing is the fastest growing threat in the history of Internet and has gained immense popularity amongst Internet fraudsters and hackers as a simple yet effective way to gain unsolicited access to confidential user information.

Remaking The Information Security Market
A Bad Year for Information Security. 2005 has been a bad year for corporate IT security. The list of companies announcing security failures goes on and on: ChoicePoint, of course, Bank of America, Wachovia Bank, PNC Bank, Commerce Bancorp, Lexis-Nexis...

07.20.05


Message Board Security Problems

By T Frady

Security leaks can be a big problem for any site using a message board. Hackers can actually use your message board to go in and change things on your site.

This has happened to me at least four times. Once an iframe was added to every single page of one of my very large sites. Thankfully, I had it completely backed up, so all I had to do was send the pages back up to the server. Twice, the front page of one of my sites was hijacked. The entire content of the front page was replaced by some note from a hacker stating he had been there.

The last time one of my sites had to be taken down to prevent the server from crashing. After calling my web host they were able to tell me my message board was the cause of the problem. I used, and still do on some sites, the phpbb message board. It is one of the most popular boards on the internet, and it's free. The web host tech told me that the problem was that a virus of sorts had been placed onto the server, through the message board, in the message board folder, and was calling out to other servers causing a major load on my web host's server. To fix the problem the web host tech found the file and deleted it. After that, all I had to do was update to the latest version of phpbb and so far so good.

If you use a popular message board like phpbb you need to make sure you've always got the latest version. The more popular a message board is, the more hackers are likely to strike. Perhaps the familiarity is the problem or maybe the hackers kno w they can get a lot of bites going after a widely used board. As of this writing, the most current version of phpbb is 2.0.15. As the phpbb guys are always security conscious they have added to this version a re-authentication to access the administration panel.

Forums are a very important part of a website, but they can be the downfall if your board script is not updated on a regular basis.


About the Author:
T Frady webmaster of http://www.buyersmls.com/ for over six years.



VeriSign Forks Out $40 Million For IDEFENSE

By Chris Crum

VeriSign announced that it has acquired Reston, Virginia-based security intelligence firm iDEFENSE for approximately $40 million in cash.

"Network perimeters are expanding to include customers, partners and remote employees, so enterprises must leverage the most advanced security intelligence to protect customer data and corporate assets," said Verisign Executive Vice President and General Manager Judy Lin.

Included in the iDEFENSE research product portfolio are iAlert Daily Delivery and FLASH Reports, Weekly Threat Reports and Focused Intelligence Reports that customers use to modify security infrastructure and respond to threats on a real-time basis.

"The acquisition of iDEFENSE expands the VeriSign suite of managed security services, providing customers with additional capabilities with which to proactively protect their networks from vulnerabilities and attacks."

VeriSign said in a press release that the addition of iDEFENSE will augment the comprehensive VeriSign Managed Security Services (MSS) offering and represents an expansion of the company's ability to monitor and assess security threats in real time. VeriSign will retain the iDEFENSE employee base, and iDEFENSE will assume the VeriSign name, continuing to market the iDEFENSE suite of intelligence services.

"We are pleased that iDEFENSE has joined the VeriSign family, and we look forward to providing customers of both companies with our combined value and strength," said John Watters, CEO of iDEFENSE.

"Our iDEFENSE intelligence-gathering capabilities, coupled with the unique intelligence VeriSign already gathers from its MSS business and operation of core Internet technologies, will enable us to provide more comprehensive, actionable intelligence to our customers before attacks strike," added Watters who will continue to lead the iDEFENSE Research team under VeriSign.

The acquisition has been approved by the boards of directors of both companies. Revenue and earnings contribution from the acquisition will not be material to Verisign's 2005 financial results.
About the Author:
Chris is a staff writer for WebProNews. Visit WebProNews for the latest ebusiness news.

AboutEnterpriseSecurityNews
Security news and updates for your enterprise

EnterpriseSecurityNews is brought to you by:

SecurityConfig.com NetworkingFiles.com
NetworkNewz.com WebProASP.com
DatabaseProNews.com SQLProNews.com
ITcertificationNews.com SysAdminNews.com
LinuxProNews.com WirelessProNews.com
CProgrammingTrends.com ITmanagementNews.com

 

-- EnterpriseSecurityNews is an iEntry, Inc. publication --
iEntry, Inc. 2549 Richmond Rd. Lexington KY, 40509
2005 iEntry, Inc. All Rights Reserved Privacy Policy  Legal

archives | advertising info | news headlines | free newsletters | comments/feedback | submit article
Enterprise Security News News Archives About Us Feedback EnterpriseSecurityNews Home Page About Article Archive News Downloads WebProWorld Forums Jayde iEntry Advertise Contact