Made to Order Software Corporation - hacker

How to bypass Drupal strong security?

Alexis Wilke — Fri, 18 Feb 2011 00:45:31 +0000

Interestingly enough, today I received a Security Advisory from Drupal saying that users received an email from a hacker asking them to install a Trojan module on their Drupal system.

I find it quite interesting since, if Drupal wasn't secure, the hackers would not have to ask you to make it unsecure, would they?

However, this shows how many CMS systems introduce a security issue problem to your web server installation since it is required to let your web server execute any one PHP file...

All the files installed on your web server and that are directly accessible from the outside (i.e. ...

Newsletters from Made to Order Software hosting websites

Alexis Wilke — Tue, 04 May 2010 09:25:50 +0000

Subscribing to a Newsletter from a website hosted with us

Made to Order Software offers advanced websites (Web 2.0) and many of our customers choose to make use of the Newsletter package with their website. It has extraordinary advantages such as adding content to your website at the same time as you are sending emails to your subscribers.

We also offer hidden mailing capabilities such as auto-responders and list management.

How do I unsubscribe?

All subscribers of any one of the lists hosted by Made to Order Software Corp. can always unsubscribe by following the unsubscribe link at the ...

Setting up your PayJunction GateWay Account

Alexis Wilke — Sat, 17 Apr 2010 23:44:13 +0000

PayJunction

PayJunction is an online product that one can subscribe to in order to process credit cards (Visa, Mastercard, American Express, Discover.)

You can get your own Merchant Account by filling up our online form.

FileAttributes

Alexis Wilke — Thu, 17 Dec 2009 07:28:20 +0000

Tag Info

Tag Number:

Tag Type:

Format

Tag Flash Version:

Tag Structure:

struct swf_fileattributes {
	swf_tag			f_tag;		/* 69 */
	unsigned		f_reserved : 3;
	unsigned		f_has_metadata : 1;
	unsigned		f_allow_abc : 1;	/* since V9.0 */
	unsigned		f_suppress_cross_domain_caching : 1;	/* since V9.0 */
	unsigned		f_swf_relative_urls : 1;	/* since V9.0 */
	unsigned		f_use_network : 1;
	unsigned		f_reserved : 24;
};

The FileAttributes tag is new to version 8. It must be present in all movies version 8 and over. It must be the very first tag in the SWF movie. It should be unique (other instances will be ignored.)

The f_has_metadata flag shall be set to 1 whenever the movie includes a Metadata tag.

MO Backup for Drupal with PostgreSQL

Alexis Wilke — Tue, 10 Nov 2009 04:21:25 +0000

$55.00

A simple module that automatically and manually creates backups of one's Drupal websites.

MO Backup backups your database and files folder. It can operate automatically when CRON is available.

$55.00

No more excuses! Protect your passwords on your computer with strong encryption.

Alexis Wilke — Thu, 29 Oct 2009 00:36:03 +0000

More and more, we hear talks about hackers entering personal accounts on systems such as Facebook, Twitter, ecademy, Plaxo and many others. There are many reasons why someone's account will be hacked. One of them is the lack of imagination for their password. Plus, some people use the same password for all of their accounts.

So, if you do it right, you will end up with many passwords. On my end, I have one password per account and that means about 400 passwords... That's totally unmanageable in a fairly standard human brain. For this reason, you end up writing down all your passwords

Your cell phone is hackable...

Alexis Wilke — Fri, 31 Jul 2009 07:02:07 +0000

This is a quite interesting article which I thought I should share and keep a copy of!

Most of us, even if we can determine whether a piece of software (or hardware!) can be hacked, we just do not have the time to spend on testing each device we use to ensure that no hackers will be able to get it. We rely on the manufacturer to do that work for us.

This article shows that even though all manufacturers have protections, all are vulnerable! And that means your data is vulnerable on your cell phones... Hope this does not scare you too much!

Drupal 6.9 upgrade

Alexis Wilke — Fri, 16 Jan 2009 01:44:07 +0000

As of now, our servers are running Drupal 6.9.

As stated on the Drupal website, this is a security update. Some issues could have given a hacker access to our database system. Although the risk was low, we decided to upgrade immediately.

The other problems that Drupal 6.9 resolves, were not issues on our servers.

If you have an questions or concerns, please, feel free to contact us.

Links:

Hacking, Good or Bad?

Alexis Wilke — Tue, 16 Sep 2008 20:06:00 +0000

I already mentioned the American Government as being a target of many hackers.

You may also remember that in 1998, the Department of Defense was hacked by someone named Ehud Tenenbau. He was arrested at the time. He was still a teenager then.

Once back on the streets, he decided to wear a white hat and helped companies, many in Israel, to enhance their defenses. But that was only his day time job!

I guess that once you had a taste for a bad behavior, you just go on with it.

Increase Security with a Reverse Proxy Server

Alexis Wilke — Mon, 22 May 2006 07:00:00 +0000

What is Reverse Proxy?

There are three excellent reasons to switch to a Reverse Proxy Server right away:

Protect all of the sensitive data on your servers;
Have only one gateway to the outside world;
Ease the load on your web server by allowing the reverse proxy server to distribute the requests.

Figure 1 below presents a simplified setup of a Reverse Proxy Server.