Category Archives: Security

Security threats abound this week, OpenSSL

From Microsoft ending support for XP and OpenSSL having a major code fault the web has been a buzz about security. The problem with OpenSSL vulnerability (called Heatbleed by Google) is that the issue has been there for 2 years but researchers on the right side of the law have just found it. The wrong…
Read more

Serious Security: Google finds fake but trusted SSL certificates in France

http://googleonlinesecurity.blogspot.com/2013/12/further-improving-digital-certificate.html by Paul Ducklin on December 9, 2013 "Google announced over the weekend that it recently came across a bunch of fake SSL certificates for some of its own domains." Read more at: http://nakedsecurity.sophos.com/2013/12/09/serious-security-google-finds-fake-but-trusted-ssl-certificates-for-its-domains-made-in-france/
Read more

Adobe’s Security Breach Widens

Please review all your accounts, Amazon, eBay, your email, DropBox and any other services that use the same combination username and password and think about changing your password hint as well. Put a post it note near you to remind you to change anything using that login. It is likely you won’t remember all the…
Read more

Why can’t I install Plugins in WordPress?

A new study has found that roughly 20 percent of the 50 most popular plug-ins for the WordPress platform are vulnerable to common Web attacks. According to research from security vendor Checkmarx, that figure represents nearly 8 million downloads of plug-ins vulnerable to issues such as SQL injection, cross-site scripting, cross-site request forgery and path…
Read more

End of Support for SMTP Authentication Using CRAM-MD5

Hello, On June 26, 2013, Blackrock Networks, Inc.  will be performing a maintenance on the Blackrock Networks, Inc. Email and Microsoft Hosted Exchange environments which will remove the ability for mail clients to send mail using the legacy authentication protocol, CRAM-MD5. Once removed, a very small portion of our customers may lose the ability to…
Read more

Can you have Multiple SSL’s on a single IP?

The answer is yes and no. Yes for most up to date browsers but no to some old ones. Unfortunelty since this is a newer technology the error messages for this issue on older browsers is less than informative. It is down right scary. It says; There is a problem with this website's security certificate.…
Read more

Java Security Risk: How to disable Java

There has been a security threat detected in the Java Plugin used in most web browsers. Internet Explorer The only way to completely disable Java in Internet Explorer (IE) is to disable Java through the Java Control Panel as noted above. Chrome Click on the Chrome menu, and then select Settings. At the bottom of…
Read more

SSL

Although having an SSL certificate can present certain user errors in regards to notification from older browsers certificate-authenticated SSL is considered mandatory by all security guidelines whenever a web site hosts confidential information or performs material transactions. There is a problem with this website's security certificate" when you try to visit a secured website in…
Read more