HostingSpeak

As you're aware of the recent hacking of WHT, have you changed any of your security policies? Have you increased backup methods?

I think a lot of the hacking hapens to servers when people upload and use nulled or cracked scripts. Problem with most of these is that a lot of the guys that null scripts and remove protection always will leave back doors in the scripts I have seen scripts built in to nulled stuff before from clients i had to remove from my windows server which pulled all info of the server including passwords and user names then script replace index pages with trash.

One of the most hacked and nulled scripts is WHMCS protection is removed to stop call backs to the developers that a script has been installed. Take it from me buy legal all the time its not worth the risk.

Rick

(05-31-2009 04:12 PM)makeitso Wrote: [ -> ]I think a lot of the hacking hapens to servers when people upload and use nulled or cracked scripts. Problem with most of these is that a lot of the guys that null scripts and remove protection always will leave back doors in the scripts I have seen scripts built in to nulled stuff before from clients i had to remove from my windows server which pulled all info of the server including passwords and user names then script replace index pages with trash.

One of the most hacked and nulled scripts is WHMCS protection is removed to stop call backs to the developers that a script has been installed. Take it from me buy legal all the time its not worth the risk.

Rick

Great advice. The recent hack of WHT saddened me, but that's the criminal element we're forced to deal with in locking down our servers.

(07-09-2009 11:12 AM)Steve-Hostirian Wrote: [ -> ]

(05-31-2009 04:12 PM)makeitso Wrote: [ -> ]I think a lot of the hacking hapens to servers when people upload and use nulled or cracked scripts. Problem with most of these is that a lot of the guys that null scripts and remove protection always will leave back doors in the scripts I have seen scripts built in to nulled stuff before from clients i had to remove from my windows server which pulled all info of the server including passwords and user names then script replace index pages with trash.

One of the most hacked and nulled scripts is WHMCS protection is removed to stop call backs to the developers that a script has been installed. Take it from me buy legal all the time its not worth the risk.

Rick

Great advice. The recent hack of WHT saddened me, but that's the criminal element we're forced to deal with in locking down our servers.

Yep, that's the truth. There will always be hackers, and people working against them. Just like there will always be police, and criminals. The battle between them, will never end.

We should aware in backup methods.


_________________
Adt security

(05-31-2009 04:12 PM)makeitso Wrote: [ -> ]I think a lot of the hacking hapens to servers when people upload and use nulled or cracked scripts. Problem with most of these is that a lot of the guys that null scripts and remove protection always will leave back doors in the scripts I have seen scripts built in to nulled stuff before from clients i had to remove from my windows server which pulled all info of the server including passwords and user names then script replace index pages with trash.

One of the most hacked and nulled scripts is WHMCS protection is removed to stop call backs to the developers that a script has been installed. Take it from me buy legal all the time its not worth the risk.

Rick

Excellent point. When I was a tech back in the day I always tried to steer my client away from free cracked software an make them purchase anything I was supporting.

For the bater security Develop policies that you plan to enforce. A policy that you are unable or unwilling to enforce is useless. If your policy states that Internet usage is strictly limited to conduct business-related tasks, but you do not block site access or have
the capability to monitor an employee’s Internet activity, you should do away with the policy. A more reasonable approach might be to state in your policy that personal usage of the Internet should be restricted to breaks or lunch hours or to state that Internet usage is allowed as long as it does not interfere with employee productivity or meeting deadlines. Some Internet filtering and monitoring tools (discussed later) allow you to restrict or allow access based on time of day. For example, employees might be allowed to shop on the Internet over their lunch hour per your policy.

Try that ones....

Nothing to do with WHT being hacked but thanks for the post

For better security you should plan for the best protectors and that can be gained by the best programmers. Basically there should not be any back doors and always keep protection against the hackers who take the data while transferring.