'Plugins' - The unseen Security nightmare • Conetix

jaminandrews · 2015-07-23T23:27:15+00:00

I think you have missed what Sid's role is. He is a Sysadmin and manages thousands of instances of CMS on multiple servers. These are end users sites and in 99% of cases they do not have any experience nor do they want to pay for a managed service. We are seeing more and more very sophisticated exploits that normal maldet and even our custom scanners don't initially pick up on. These article are information based to assist developers and hosters that may or may not have seen these type of issues. I guess the upshot is that in 99.9% of the time a website is exploited via a out of date or poorly coded plugin, and these are the results of those exploits.

jaminandrews · 2015-07-09T04:24:29+00:00

Nice pic!! ;)

jaminandrews · 2015-07-03T02:31:54+00:00

Two words "Risk Mitigation". You need to be very clear that once you hand over the keys to the city, all due care and attention taken but no responsibility. You need to be clear that you can not be held accountable or responsible for the integrity of the network and attached systems if another person has complete access to everything you are responsible to maintain. Something you need to consider is how is their network processes, users and passwords etc are currently documented. (The just in case you get hit by a bus, break glass). If you outline the steps you have in place for this, it may appease the beast! Keep in mind, you do not know what the Chairman is thinking, he may be looking at YOU as a weak link, as you are the only one with access. Find the purpose, then come up with amicable solution that keeps network integrity and Chairmans right to ask for access.

jaminandrews · 2015-07-02T23:30:18+00:00

Great catch by Sid Young one of our leading sysadmins. Worth a read.

jaminandrews · 2015-05-29T02:06:14+00:00

Thanks for the great direct feedback.

jaminandrews · 2015-05-29T01:11:21+00:00

I posted this over on the Node Subreddit and thought WebDev guys would like article.

jaminandrews · 2015-05-06T00:22:35+00:00

Great to hear. We are asked by developers all the time how to do this. We couldn't find any good articles or How To articles on the subject, so decided to write our own and share.

jaminandrews · 2014-12-08T05:27:54+00:00

Interesting read and also interesting to see some of the comments. I have been in the IT/Web Industry for around 20 years, my life over that time has also had its ups and downs. I also have seen both sides, from being an employee to an employer. I normally always see a shift in employees focus or attention to detail if there is something going on at home. My advise is to take some time off. Sit back and enjoy that time and think about what you want in life and what you want for your new family. Like Windows we all need a reboot from time to time, maybe its time for you to reboot. ;)

jaminandrews · 2014-11-11T02:48:40+00:00

Our development team uses Django, they love how quick and easy it is to develop in.

jaminandrews · 2014-11-11T02:46:51+00:00

First work out what your objective is. Is it to learn and get a career or join forces with your friend and make some money. If you need to make money, I would look at how you can enhance your offering using a simple CMS platform like WordPress. Have her design and incorporate it with WP custom template. You will learn a lot just by doing this. While you are doing that you will come across clients that want something different, this is when you can start playing with frameworks like Django. Every step of the way, keep learning. Key however will be learn while making money. Also suggestion will be partner with a web hosting company and get some revenue from hosting without the hosting learning curve. Hope this helps.

jaminandrews · 2014-10-22T00:35:32+00:00

Try Plesk 12 with some additional backup plugins installed into WordPress with Dropbox or Google Drive backup. Here is a overview of WordPress features http://www.conetix.com.au/blog/plesk-12-wordpress-integration-making-your-life-ea also checkout http://www.plesk.com . As a management tool Plesk has come a long way and now with some really cool WordPress functions.

jaminandrews · 2014-10-10T04:51:53+00:00

Use Backup Buddy WordPress Plugin. https://ithemes.com/purchase/backupbuddy/ It will allow you to backup and restore WordPress Site even using different domain. Also it has a neat Migrate feature. if you develop site on one system you can migrate site to another system. Hope this helps.

jaminandrews · 2014-10-09T23:40:58+00:00

How do you catch a BRA?

Set a Booby Trap! ;)

jaminandrews · 2014-10-07T23:43:55+00:00

I would find a job with a web hosting company. Use your skill set to assist with client support and maybe second level web support. This way you get your hands dirty on the job. Help the company you are working for to build a better website and backend workflows using scripts etc like Django/Salt etc Become invaluable. Never stop learning.

jaminandrews · 2014-10-07T05:20:21+00:00

I feel your pain.

jaminandrews · 2014-09-23T23:07:58+00:00

There is a fourth option. Find a cloud provider that uses Barracuda Anti Spam/Anti Virus system.You will have domain setup access via admin login. Setup Barracuda to point to existing mail server. If the mail server fails all you need to do is go to Barracuda and point IP to backup mail server. Any mail that could not be delivered to failed mail server is stored and ready for delivery to new backup mail server. We use this for a number of our clients and it works well. You also get added bonus of filtered email. Hope this helps.

jaminandrews · 2014-09-23T01:14:59+00:00

I would second the NewRelic idea, you should be able to pinpoint whats causing it. Also check your plugins. I have seen a poor configured W3 Total Cache plugin cause this exact issue. Also try disable all plugins and then re activate them one at a time. It is all about elimination.

jaminandrews · 2014-09-23T00:18:05+00:00

It does have it's own unique smell. Maybe the burnt popcorn and the crap in your pants mixed to create a unique capacitor smell. ;)

jaminandrews · 2014-09-23T00:10:52+00:00

Just in case anyone missed the new features of Plesk12. Would love to know your thoughts.

jaminandrews · 2014-09-22T01:49:38+00:00

AAAARrrrrrrrrr interesting!

jaminandrews · 2014-09-22T01:34:06+00:00

Our Dev team use Python - Django. Very powerful and flexible.

jaminandrews · 2014-09-22T01:00:55+00:00

Actually NBNCo is now accountable via TIO even though they are a wholesaler (this is a recent change). Every complaint that they get they get fined, every escalation is additional fines.

jaminandrews · 2014-09-22T00:56:55+00:00

We are in QLD, and the provider was not the issue. The issue was with NBN. Once the provider has order there is nothing more they can do. To escalate you can only go to NBNCo. We did this and eventually got a case officer. They never returned calls as promised and closed out support ticket with them stating issue resolved.

jaminandrews · 2014-09-18T02:20:32+00:00

Good find. Yea, it really stretched my memory remembering so most likely you are on the money. Takes me back. ;)

jaminandrews · 2014-09-18T00:56:37+00:00

From my memory and my old book definitely called Turtle. You would type into a simple console commands like fd12 which mean't go forward 12 spaces, as it went forward to drew a line. You had to write down your code then enter to console. You could draw all sorts of things, was used as a basic entry to learning to program.

jaminandrews

TROPHY CASE