Love, Sex, Secret, and … God

This post originally written for my personal blog on January 11, 2009.

This past week saw two high profile security breaches on twitter.com and macrumorslive.com, each one a classic example of poor login management by websites. For full disclosure, I do not know anyone at either site but have read about each here and here as well as other websites. The short version on twitter is that an admin at twitter had a common word password and twitter has no limit on the times you can try your login. The short on Mac Rumors Live is that they either had no password on their admin interface or that the login page was sniffed, either way it was a bummer for them.

As a system administrator it is a constant challenge to keep our systems and the web applications that run on them secure while still keeping the usability that our great developers have created. So when I see things like the twitter and mac rumors issues I get very frustrated because the prevention of this is so simple. If you develop a website with user accounts, and most of them do, please consider the following.

Complex password requirements. Google returns about 232,000 results for javascript to check for strong passwords so you don’t even need to invent the wheel to add this to your change / create password page. If you don’t want to bother your users with this at least take some time to require it on admin accounts.

HTTPS, the S is for secure. Developers, please use ssl to encrypt your login page and use redirects to ensure that users don’t accidentally end up there without ssl. As more of us move out of the office and into the coffee shop we are also moving off of a private network and onto a public one. We log into twitter, brightkite, our blog, our email and most people give no thought to the idea that everyone else in that coffeeshop could now have your account and password, unless we use something secure like https. Webmail sites learned this lesson long ago and it’s time for the rest of the web to learn it too. The worst part of this is that most sites already have an https version of their site and it would be a very simple fix for them to redirect to it. For those sites that don’t ( I’m looking at you brightkite ), it’s time to step up, spend the money and get https going. For you wordpress users, setup a self-signed certificate (or purchase one) and wordpress has a plugin to do all the wp-admin encryption redirects for you.

More services are being provided via websites and as users of these we need to demand that they are secure. Give them feedback asking that logins be secure by default so that what happened with twitter and mac rumors doesn’t happen to you.

Reblog this post [with Zemanta]
2009
01/11
CATEGORY
Security
TAGS






671 comments

  1. My brother recommended I might like this blog. He was entirely right. This post truly made my day. You cann’t imagine simply how much time I had spent for this info! Thanks!

  2. Appreciation for adding this info.

  3. Zune and iPod: Most people compare the Zune to the Touch, but after seeing how slim and surprisingly small and light it is, I consider it to be a rather unique hybrid that combines qualities of both the Touch and the Nano. It’s very colorful and lovely OLED screen is slightly smaller than the touch screen, but the player itself feels quite a bit smaller and lighter. It weighs about 2/3 as much, and is noticeably smaller in width and height, while being just a hair thicker.

  4. Everyone loves designer bags but most of them are expensive. Louis Vuitton is a reputable brand for designer handbags. You can get Louis Vuitton designer bags at a great discount at a Louis Vuitton outlet. If you can’t find a Louis Vuitton outlet anywhere near to where you stay you can search for one using Google. Even if the nearest outlet is a few hours’ drive you should try to visit it you can avail incredible discounts at these outlets.

  5. I’ll gear this review to 2 types of people: current Zune owners who are considering an upgrade, and people trying to decide between a Zune and an iPod. (There are other players worth considering out there, like the Sony Walkman X, but I hope this gives you enough info to make an informed decision of the Zune vs players other than the iPod line as well.)

  6. Everyone loves designer bags but most of them are expensive. Louis Vuitton is a reputable brand for designer handbags. You can get Louis Vuitton designer bags at a great discount at a Louis Vuitton outlet. If you can’t find a Louis Vuitton outlet anywhere near to where you stay you can search for one using Google. Even if the nearest outlet is a few hours’ drive you should try to visit it you can avail incredible discounts at these outlets.

  7. You should be a part of a contest for one of the best websites online. For certain I will recommend this blog!

  8. The new Zune browser is surprisingly good, but not as good as the iPod’s. It works well, but isn’t as fast as Safari, and has a clunkier interface. If you occasionally plan on using the web browser that’s not an issue, but if you’re planning to browse the web alot from your PMP then the iPod’s larger screen and better browser may be important.

  9. The new Zune browser is surprisingly good, but not as good as the iPod’s. It works well, but isn’t as fast as Safari, and has a clunkier interface. If you occasionally plan on using the web browser that’s not an issue, but if you’re planning to browse the web alot from your PMP then the iPod’s larger screen and better browser may be important.

  10. The president and first lady are not concerned about being invited to those children’s wedding. How ludicrous to have made up “sources say”.

  11. Hands down, Apple’s app store wins by a mile. It’s a huge selection of all sorts of apps vs a rather sad selection of a handful for Zune. Microsoft has plans, especially in the realm of games, but I’m not sure I’d want to bet on the future if this aspect is important to you. The iPod is a much better choice in that case.

  12. It is in point of fact a nice and helpful piece of information. I am glad that you just shared this useful info with us. Please keep us informed like this. Thank you for sharing.

  13. Generally When i don’t read post in blogs, but I want to say that it write-up rather forced me to try to do for that reason! Your composing style has been amazed me. Thanks, quite good article.

  14. Great goods from you, man. I’ve understand your stuff previous to and you’re just too great. I really like what you have acquired here, certainly like what you’re stating and the way in which you say it. You make it entertaining and you still take care of to keep it smart. I can not wait to read far more from you. This is actually a great website.

  15. Now that is being cre8tive What a beautiful transformation, and it is the twin to the Ballard Design one, there is no difference in quality what so ever, yours might be even better, awesome job.

  16. I really wanted to appreciate you again. We will attempt certain what I wouldve sorted out without those techniques contributed by yourself on such problem. Certainly was an incredibly terrifying situation in my view, nevertheless taking a look at this professional mode you resolved it forced me to leap with happiness. Im thankful for this purpose advice and likewise have high hopes you find out just what a wonderful that youre starting instructing most people using a site. Likely you havent come across us all.

  17. Hey! I merely need to offer a large thumbs way up for your fantastic details you’ve here on this post. I will always be returning to your blog to get more shortly.|

  18. The president and first lady are not concerned about being invited to those children’s wedding. How ludicrous to have made up “sources say”.

  19. The president and first lady are not concerned about being invited to those children’s wedding. How ludicrous to have made up “sources say”.

  20. Keep up the excellent deliver the results, I read few blog articles on this site and I do think that your website is really interesting and contains circles associated with great data.

  21. Hi there! I just want to give an enormous thumbs up for the great info you might have here on this post. I might be coming again to your blog for more soon.

  22. Big Wedesday. Awesome… you may could possibly redesign this unique. Thank you.

  23. Heya i’m for the first time here. I located this board and I to uncover It truly beneficial & it helped me out a good deal. I hope to offer something back and aid others such as you helped me.

  24. People tended to give outstanding tips available. Me created a examine on the subject and located nearly any folks should certainly accept as true with your web page.

  25. The president and first lady are not concerned about being invited to those children’s wedding. How ludicrous to have made up “sources say”.

  26. Thanks for all of your hard work on this blog. My mom takes pleasure in going through investigation and it is obvious why. A number of us notice all regarding the dynamic ways you convey invaluable techniques through the web blog and as well cause contribution from other ones on this subject matter plus our girl has always been becoming educated a lot of things. Take advantage of the rest of the year. You’re the one carrying out a superb job.

  27. I don’t suppose I’ve never learned something like this before. So good to see somebody with some authentic ideas on this subject. I really thank you for starting it. This website is one thing that is needed on the web, someone with just a little originality.

  28. The president and first lady are not concerned about being invited to those children’s wedding. How ludicrous to have made up “sources say”.

  29. I got what you will, thanks for swing up. Woh I am willing to effort this website through google. Thanks For Share Love, Sex, Secret, and … God | J Squared Consulting.

  30. Love, Sex, Secret, and … God | J Squared Consulting I was suggested this blog by my cousin. I’m not sure whether this post is written by him as nobody else know such detailed about my trouble. You are amazing! Thanks! your article about Love, Sex, Secret, and … God | J Squared Consulting Best Regards Yoder Rolf

  31. Thanks for your submission, previously interesting and compelling. I discovered my way here through Google, I am going to get back another time :)

  32. Excellent goods from you, man. Love, Sex, Secret, and … God | J Squared Consulting I’ve understand your stuff previous to and you are just too excellent. I really like what you’ve acquired here, certainly like what you’re stating and the way in which you say it. You make it entertaining and you still take care of to keep it sensible. I can’t wait to read much more from you. This is really a terrific Love, Sex, Secret, and … God | J Squared Consulting informations.

  33. Many thanks for the art, previously interesting and compelling. I discovered my way here through Google, I’ll go back over again :)

  34. Fantastic goods from you, man. Love, Sex, Secret, and … God | J Squared Consulting I have understand your stuff previous to and you are just extremely magnificent. I really like what you’ve acquired here, really like what you are stating and the way in which you say it. You make it entertaining and you still take care of to keep it wise. I can’t wait to read far more from you. This is actually a tremendous Love, Sex, Secret, and … God | J Squared Consulting informations.

  35. A bathroom should never go out of style, that’s why it is best to furnish it with timeless pieces that perfectly match together. You do not need to mix and match separate items for your bathroom. A white bathroom suite would be the best decision for you.

  36. Love, Sex, Secret, and … God | J Squared Consulting I was suggested this blog by my cousin. I’m not sure whether this post is written by him as no one else know such detailed about my problem. You’re amazing! Thanks! your article about Love, Sex, Secret, and … God | J Squared Consulting Best Regards Craig Cassetta

  37. Love, Sex, Secret, and … God | J Squared Consulting I was suggested this web site by my cousin. I’m not sure whether this post is written by him as no one else know such detailed about my trouble. You’re incredible! Thanks! your article about Love, Sex, Secret, and … God | J Squared Consulting Best Regards Justin Rolf

  38. Tag Heuer Formula 1 Red

  39. Great blog. Many websites like yours cover subjects that aren’t found in magazines. I don’t know how we got by 15 years ago with just print media.

  40. Thanx for a very informative web site. Where else may I get that type of information written in such an ideal approach? I have a challenge that I am simply now running on, and I have been at the look out for such information.

  41. Love, Sex, Secret, and … God | J Squared Consulting I was recommended this website by my cousin. I’m not sure whether this post is written by him as nobody else know such detailed about my problem. You are amazing! Thanks! your article about Love, Sex, Secret, and … God | J Squared Consulting Best Regards Justin Justin

  42. Firstly , you should know regarding accomplishing residence medication checks is because tend to be properly legitimate. Regardless of how considerably young kids stomp their own foot or perhaps focus on intrusion involving privacy, when they are younger than 16 they can be your current duty.

  43. Your delusion is persistant which cholesterol levels has to be lessened. This will be extremely thought by many medical practitioners, law makers along with the open public. Creditable investigation during the past Several years, in this article in addition to offshore refutes this concept. Without a doubt, non-drug funded investigation demonstrate bad cholesterol decreasing can be a health hazard.

  44. On the subject of Breast Cancer deterrence and also therapy, supplements in addition to nutritional supplements might help. Many doctors may promote one to have a pro-active purpose a highly effective well being. Herbal antioxidants, nutritional supplements may possibly transform your disease fighting capability and also help your whole body for you to reply to ailments.

  45. tory burch channing hobo

  46. Tag Mens Watch

  47. I used to be recommended this website via my cousin. I’m no longer sure whether or not this submit is written via him as nobody else recognize such particular approximately my trouble. You’re amazing! Thank you!

  48. Good day! This is kind of off topic but I need some help from an established blog. Is it very difficult to set up your own blog? I’m not very techincal but I can figure things out pretty quick. I’m thinking about making my own but I’m not sure where to begin. Do you have any ideas or suggestions? Thank you

  49. Love, Sex, Secret, and … God | J Squared Consulting I was recommended this web site by my cousin. I’m not sure whether this post is written by him as nobody else know such detailed about my difficulty. You are wonderful! Thanks! your article about Love, Sex, Secret, and … God | J Squared Consulting Best Regards Cassetta Yoder

  50. Love, Sex, Secret, and … God | J Squared Consulting I was suggested this web site by my cousin. I am not sure whether this post is written by him as nobody else know such detailed about my trouble. You’re incredible! Thanks! your article about Love, Sex, Secret, and … God | J Squared Consulting Best Regards Craig Lawrence

1 ... 4 5 6 7 8 ... 12

  1. No trackbacks yet.