Jump to content

LSW

Moderators
  • Posts

    1,625
  • Joined

  • Last visited

  • Days Won

    28

Everything posted by LSW

  1. Over 115,000 Drupal Sites Still Vulnerable to Drupalgeddon2 Exploit https://thehackernews.com/2018/06/drupalgeddon2-exploit.html
  2. Here's How to Download All the Data Apple Collects About You https://thehackernews.com/2018/05/download-apple-account-data.html
  3. If it is Drag n' Drop, do it yourself. I certainly would not pay someone calling themselves a web developer for that. Those sites exists to allow you to do it yourself without a professional involved. Those of us who actually went to school to learn web design and what goes into it sort of cringe at the idea. You have no idea about the code background either, is it accessible for those with disabilities? Autistic, poor vision/blind, dyslexic? Will it be secure or leave you open to legal action under the new EU GDPR regulations? Off the top, to me it sounds like a lot of money for something you can do and who is to say this person even knows what they are really doing? Do they know CSS and HTML5 enough to modify it? Fix it when it gets broken? I feel someone who does not know how to code a site by hand has no business using drag n' drop. If you can do it by hand and do it that way to speed it up and you trust the software to do almost a good a job as you would by hand... then it is forgivable. Does that price include hosting? That makes a difference as well.
  4. Good news on the Net Neutrality Issue, the Senate has voted to repeal Pi's decision. But it is not over yet, although the Senate voted to repeal it, the House of Representatives has not yet and the timer to do so is ticking down. For those of you who really care, pop off another letter or phone call to your representative and let them know a vote must take place and what you expect that vote to be, they are supposed to represent us and not big business. As for the Senate... the vote was 52 to 47, we won the vote, but only be 5 votes which I find to be a sorry margin indeed. But hey, horse shoes and hand grenades...
  5. Microsoft Patches Two Zero-Day Flaws Under Active Attack https://thehackernews.com/2018/05/microsoft-patch-tuesday.html
  6. Just as a general rule to consider, Tables are only to be used for housing data, basically spreadsheets etc. Back in the middle ages of the 80s and 90s there was not a graphic way of placing web elements so tables were creatively misused. They did in fact limit what designers could do. The correct way to handle this is with CSS. You can place anything anywhere you want by simply creating empty boxes and filling them with data, images, or more boxes as you like where you like and this is really the best way to do it. It can e tricky to learn, but not really hard, you simply have to get used to thinking that way and in pixels. One benefit as well is doing so in this manner, it will leaver your source code and data cleaner. Those with disabilities will find the web site easier to navigate, including those with vision issues and search engine spiders. All your "Look and feel" elements can be placed in a separate external CSS file, separating your web site information from the web site graphical look and feel (this is what makes it better for disabilities and spyders). Also, you can then swap out the CSS file and change the look and feel of the web site with little to know changes to the actual HTML file if it is well planned and designed. If this is an issue that needs correcting fast than Daniel's code should work. But in the long run you will want to learn CSS and eventually change the site to boxes instead of tables. But to not fear creating sites in phases. Phase one - get it up there, phase two - clean it up and improve it.
  7. Twitter: We Goofed; Change Your Password Now https://www.databreachtoday.com/twitter-we-goofed-change-your-password-now-a-10972
  8. Twitter News A Twitter Bug Left Android Users' Private Tweets Exposed For 4 Years [1/18/2019] Twitter Discloses Suspected State-Sponsored Attack After Minor Data Breach [12/19/2018] Twitter is Testing End-to-End Encrypted Direct Messages [5/8/2018] Twitter - We Goofed, Change Your Password Now [5/4/2018] Twitter Sold Data to Cambridge University Psychologist [5/1/2018]
  9. Drupal has released two more patches in the last 48 hours! Time to Update again!
  10. Release of PoC Exploit for New Drupal Flaw Once Again Puts Sites Under Attack https://thehackernews.com/2018/04/drupalgeddon3-exploit-code.html
  11. Third Critical Drupal Flaw Discovered - Patch Your Sites Immediately https://thehackernews.com/2018/04/drupal-vulnerability-exploit.html
  12. Drupal Vulnerabilities Drupal Releases Core CMS Updates to Patch Several Vulnerabilities [4/17/19] Hackers Actively Exploiting Latest Drupal RCE Flaw Published Last Week [2/26/2019] Another Critical Flaw in Drupal Discovered — Update Your Site ASAP! [2/25/2019] Hackers Target Fresh Drupal CMS Flaw to Infiltrate Sites [2/25/2019] Symfony Flaw Leaves Drupal Sites Vulnerable to Hackers—Patch Now [7/6/2018] Over 115,000 Drupal Sites Still Vulnerable to Drupalgeddon2 Exploit [6/6/2018] Release of PoC Exploit for New Drupal Flaw Once Again Puts Sites Under Attack [4/26/2018] Third Critical Drupal Flaw Discovered—Patch Your Sites Immediately [4/26/2018] Another Critical Flaw Found In Drupal Core-Patch Your Sites Immediately [4/19/2018] Hackers Exploiting Drupal Vulnerability to Inject Cryptocurrency Miners [4/18/2018] Hackers Have Started Exploiting Drupal RCE Exploit Released Yesterday [4/16/2018]
  13. Please see the recent alerts in my security forum and update:
  14. Make this thread: "Drupal Users need to update.. again!" Another Critical Flaw Found In Drupal Core-Patch Your Sites Immediately https://thehackernews.com/2018/04/drupal-site-vulnerability.html
  15. Here is another article on the hacker attacks now happening against Drupal. Hackers Exploiting Drupal Vulnerability to Inject Cryptocurrency Miners https://thehackernews.com/2018/04/drupal-cryptocurrency-hacking.html
  16. Quick and Dirty Definition: The Internet of Things (IoT) is everything else connected to the internet that is not a traditional computer or optional tool (like printers). This means watches, washing machines, refrigerators, robots, vacuum cleaners, security cameras, baby phones, BBQ thermostats, water sensors, light bulbs, pace makers, insulin injectors, cars etc. etc. etc. You may have devices you connect to the internet that makes your life easier without thinking security... the issue is, is the manufacturer thinking security? You know OS developers worry about hackers, you know your router and your PC and your Tablet and your Phone have security settings... but does that light bulb? Was the manufacturer of your coffee pot worried about security? The answer is usually no. Manufacturers of security cameras are not controlled, so their is almost no protection built in. Jogging soldiers and airman have been found to be giving away important data on our bases due to apps tracking them as the jog. Robotic vacuum cleaners are collecting data on the layout of your house and the data is being sold. I present you with a new example of this: Casino Gets Hacked Through Its Internet-Connected Fish Tank Thermometer https://thehackernews.com/2018/04/iot-hacking-thermometer.html
  17. Hackers Have Started Exploiting Drupal RCE Exploit Released Yesterday https://thehackernews.com/2018/04/drupal-rce-exploit-code.html If you have not updated Drupal recently, good idea to do in sooner than later.
  18. Popular Android Phone Manufacturers Caught Lying About Security Updates https://thehackernews.com/2018/04/android-security-update.html
  19. Facebook News New York, Canada, Ireland Launch New Investigations Into Facebook Privacy Breaches [4/29/2019] Facebook says it 'unintentionally uploaded' 1.5 million people's email contacts without their consent [4/17/2019] Millions of Facebook Records Found Unsecured on AWS [4/4/2019] 540 Million Facebook User Records Found On Unprotected Amazon Servers [4/4/2019] Facebook Caught Asking Some Users Passwords for Their Email Accounts [4/3/2019] New Settings Let Hackers Easily Pentest Facebook, Instagram Mobile Apps [3/25/2019] Report: Facebook Stored Millions of Passwords in Plaintext [3/22/2019] Facebook won’t let you opt out of its phone number ‘look up’ setting [3/4/2019] How to Stop Facebook App From Tracking Your Location In the Background [2/26/2019] How to Hack Facebook Accounts? Just Ask Your Targets to Open a Link [2/19/2019] Facebook's Leaky Data Bucket: App Stored User Data Online [2/19/2019] How to Delete Accidentally Sent Messages, Photos on Facebook Messenger [2/7/2019] Facebook Paid Teens $20 to Install 'Research' App That Collects Private Data [1/30/2019] Facebook Sued in U.S. Over Cambridge Analytica [12/20/2018] As Facebook Raised a Privacy Wall, It Carved an Opening for Tech Giants [12/19/2018] New Facebook Bug Exposed 6.8 Million Users Photos to Third-Party Apps [12/17/2018] Ireland's Privacy Watchdog Probes Facebook Data Breaches [12/17/2018] UK Parliament Seizes Internal Facebook Privacy Documents [11/27/2018] 30 Million Facebook Accounts Were Hacked: Check If You're One of Them [10/16/2018] Facebook Can't Reset All Breach Victims' Access Tokens [10/4/2018] Facebook Finds 'No Evidence' Hackers Accessed Connected Third-Party Apps [10/3/2018] Hackers Stole 50 Million Facebook Users' Access Tokens Using Zero-Day Flaw [10/1/2018] Facebook Hacked — 10 Important Updates You Need To Know About [10/1/2018] Facebook Submits GDPR Breach Notification to Irish Watchdog [10/1/2018] Apple Forces Facebook VPN App Out of iOS Store for Stealing Users' Data [8/23/2018] Facebook Admits Sharing Users' Data With 61 Tech Companies [7/2/2018] Facebook bug changed 14 million users’ default privacy settings to public [6/8/2018] Facebook Accused of Giving Over 60 Device-Makers Deep Access to User Data [6/6/2018] Report: Facebook App Exposed 3 Million More Users' Data [5/16/2018] Along with Dating, Here’s a List of New Features Coming to Facebook [5/2/2018] Facebook Plans to Build Its Own Chips For Hardware Devices [4/19/2018] Facebook's Zuckerberg Pledges Worldwide GDPR Compliance [4/16/2018] Vulnerabilities A New Cryptocurrency Mining Virus is Spreading Through Facebook [5/2/2018] I Downloaded the Information That Facebook Has on Me. Yikes. [4/11/2018] Can Facebook's new hires take on troll farms and data privacy? [4/11/2018] Facebook's Zuckerberg Takes First Drubbing in D.C. [4/11/2018] Facebook Offering $40,000 Bounty If You Find Evidence Of Data Leaks [4/11/2018] How to Find Out Everything Facebook Knows About You [4/11/2018] Senators Raise Issue of Regulating Facebook [4/11/2018] Facebook Password Stealing Apps Found on Android Play Store [1/19/2018] Beware of Cryptocurrency Mining Virus Spreading Through Facebook Messenger [12/22/2017] Wait, Do You Really Think That’s A YouTube URL? Spoofing Links On Facebook [11/1/2017] How to Hack Someone's Facebook Account Just by Knowing their Phone Numbers New multi platform malware/adware spreading via Facebook Messenger - Securelist Scam Alert: Your Trusted Friends Can Hack Your Facebook Account
  20. Pre-Installed Malware Found On 5 Million Popular Android Phones https://thehackernews.com/2018/03/android-botnet-malware.html
  21. Cyber Security is a branch of it's own and I have been studying it for over a year now. Not only do they not need to know everything, but it would leave them no time to actually build web sites. Security is mostly the realm of ISPs, servers and hosts, but it is not something that you can ignore simply because you are "Simply the web developer". If they get hacked and it suggests it is do to something you did not do or did wrong, not good for your business. So aside from making sure some simple rules are followed, it is a good idea to know that any Hosts you may suggest to a customer is trustworthy too. This is just 4 things web developers can do, I could suggest a lot more but that is more the hosts job. I am a former web developer and these are things I did not consider back then.
  22. Federal Judge: Yahoo Breach Victims Can Sue https://www.databreachtoday.com/federal-judge-yahoo-breach-victims-sue-a-10712
  23. Windows 10 'S Mode' Coming Soon - For Security and Performance https://thehackernews.com/2018/03/windows-10-s-mode.html
  24. Also good if you want to play with Linux and get used to it before switching, but Kali has lots of apps not normal on Linux distributions and used only for security work/hacking. Run 'Kali Linux' Natively On Windows 10 - Just Like That! https://thehackernews.com/2018/03/kali-linux-hacking-windows.html
  25. Just an article that I thought some of you may find useful speeding up your wi-fi networks. 5 things that will slow your Wi-Fi network by NetworkWorls Magazine https://www.networkworld.com/article/3256026/lan-wan/5-things-that-will-slow-your-wi-fi-network.html
×
×
  • Create New...