How Do You Handle Hacking Situations?

[bluelaser]

I understand you guys talk alot about server uptime, but i wonder do you have any mechanisms in place to prevent hackers from defacing a site or changing the ftp password blah blah...

[TCH-Dick]

We take security very seriously, so of course we take all steps possible to protect our servers. However the only 100% secure server is one that isnt plugged in, powered on or hooked to the internet.

[TCH-Rob]

Also remember that most often it one of poorly used passwords or software one has installed themselves that is mismanaged and opens the door and not server side software.

[Deverill]

Indeed, Rob. If a user has a weak password then his site is vulnerable to defacement but there is a wall between the user's sites and the server software. The server passwords are all very secure and although anyone can get hacked if they want in badly enough, there are hundreds [edit: or hundreds of thousands] of other sites that are easier to get into than ours.

 

Hope this helps.

Edited October 21, 2004 by TCH-Jim

[TCH-Thomas]

software one has installed themselves

One good thing to do is to sign up on eventual mailinglists that a site we have downloaded a script or program from may offer, so we know when updates are released (especially security updates).

Edited October 21, 2004 by TCH-Thomas

[bluelaser]

ok thanks!

[section31]

around 1.5 years ago they broke into my cpanel b/c I had a weak password and messed up my entire site.....They placed some anti arab stuff on there...apparanty it was an israeli fundamentalist hacking group...

 

A lesson well learned...hah

[TCH-Don]

I switched to a password manager

from our TotalChoiceHosting Help Site > freebies

called Any Password, its encrypted.

Now I can use it to make random passwords

and not worry about forgetting them.