How to Protect your Sites


Well one of my sites was taken down for a couple of hours after it was completely screwed from a hack (well from script kiddies, but still), that deleted admin accounts and posts and added re-directs and other nasty stuff, cleaning it up would mean several hours and some things might be completly lost forever anyways, so what to do? before this happened, during or after to fix it, so what do i do to keep my sites online and protected, ill separate these into 3 major points:

Preventive Protection (before any problem)
  • Always have the latest updates to your online software, yes i know sometimes it brings new bugs, but most of the times its better to take the time to find workarounds and still update to the latest than opening yourself to an attack;
  • Always have multiple backups, all my hosts have backups but i also make my own to other servers (weekly) as well as a to my own computers (montly),  this ensures that even if there is a catastrophical failure (your host dies on you or deletes your account) that you are still able to bounce back pretty quickly;
  • Make sure your hosting is separate from your domains, since keeping those 2 together means if you need to jump to another host that you will always have problems (also have always a backup host that you like, and trust to jump to quickly if need be);
  • Use popular software, yes it might be a bigger target for hacks and security issues, but the chance of having updates and fixes is also much larger;
  • Resilient Hosting, doesn't need to be cloud hosting or some strange arrangement, just needs to be from good hosting companies with good track records, they ensure that most hardware/server failures will never happen and if they did, that a fix would be done quickly and efficiently

Immediate Protection (when you first detect the problem)
  1. Put the site Offline, if you are on a apache server it normally means an update to the htaccess/htpasswd, you don't want your users getting affected by your compromised site;
  2. Check to see how was the site compromised, was it the server, a bad admin, software flaw, try and find how did this happen;
  3. After you find out the flaw, search and see if there is a fix to it (server/software update), banning an admin, whatever it is, cause after you fix it, you need to make sure it doesn't happen again.

Reactive Protection (how to fix the problem)
  • Best way is always, just delete the whole site and bring back the latest stable backup, sure you will lose some content or news but you have a guarantee that your site comes back crisp and clean, fixing it by hand means you can miss something and still keep your site compromised;
  • Make a test run and check if everything is alright, make sure to make the necessary adjustments before bringing the site back online;
  • Fix the security issue, if you found out what was the problem, go ahead and do the updates or workarounds, so this doesn't happen again;
  • Make a brand new backup immediately before bringing the site back on, this ensures that if the site is still vulnerable, that you can bring it back up quickly, without much loss.
So that's it, yes i know its basically using backups, and yes there are other ways, but this is the easiest more efficient way to protect your site from premature death ^_^

Brand New Tentakle


Yep new design for tentakle.com, i went with a simple campy look, 50's horror look hehehe, makes it way nicer to check the awesome imageboard, also added several new boards, lets see how all the uses will like it, so yeah check here for some slimey tentacle hentai pictures ^_^

Why Does Google Buzz Suck?


Txaaa i normally dont use this blog for rants about products, heheh anyways, google just launched buzz, its a gmail addon for small talk and sharing of media with your friends, i just dont understand the point, gmail is awesome because it is simple and to the point, it makes manageing your e-mail a breeze, now we have chat and buzz and all kinds of random stuff in there.

We have flickr for photo sharing and photo communities and we have facebook for small talk and basic sharing, nowadays we have all this crossover sharing like posting on twitter also posts on facebook and gmail has chat and i see less and less value in it, why would i use buzz? it just adds more clutter to my e-mail its just a time waster, if you go photo sharing you will still want to post it on flicrk as well, if you go talk small or just random sharing you will still want to go to facebook or twitter, so whats the point?

Google should clean up their job with orkut or jaiku, or finally launch a quality skype/pidgin gtalk software that can connect to all the major IM networks as well as provide affordable voice services (connecting with google voice) and quit this idiotic social experiments, its like all the shit with google reader, its too much bloat, after a while it stops being a feed reader, one thing is adding value (gmail labs is a awesome idea), another is adding random stuff that has no obvious purpose and just duplicates functions other sites do better, kinda like google friend connect (com)