Language Selection

English French German Italian Portuguese Spanish

Creating a managed website—Part 1

Filed under
HowTos

Do you manage a website? Maybe you’re looking after the site for a small business. Maybe you’re doing it for a community group. Perhaps it’s your own personal site. You’d like it to be dynamic: to have some fresh news every week and a home page that’s always up to date. Therein lies the problem. You’re tired of constantly editing HTML to make these changes. And every change gets more complex as you try to keep the look-and-feel consistent across all the pages. Or maybe the site was developed by an external designer. That shielded you from the technical complexities, but now every change takes time and costs money. Perhaps you need a content management system (CMS)...

Do I need a CMS?

A CMS can insulate you from the technical complexities of updating content. Rather than having to learn HTML editors and manage FTP protocols, you can get back to what you want to do—use simple editing tools to create up-to-date, well-presented content for your audience.

Full Story.


Recently this site was updated to avoid a potential security weakness. This article briefly describes the problem which was fixed, and explains some of the most common online security problems.

Introduction

This article was inspired by recent comments from dkg about a potential security hole present in the code behind this website.

The hole described was new to me and I think it is worth sharing in the interests of full-disclosure, credit to Daniel Gillmor, and hopefully the securing of more sites.

Improving website security.

More in Tux Machines

Android N’s navigation buttons could get a face-lift

New Zealand vs Wales Live Streaming

Android Leftovers

IT runs on the cloud, and the cloud runs on Linux. Any questions?

A recent survey by the Uptime Institute of 1,000 IT executives found that 50 percent of senior enterprise IT executives expect the majority of IT workloads to reside off-premise in cloud or colocation sites in the future. Of those surveyed, 23 percent expect the shift to happen next year, and 70 percent expect that shift to occur within the next four years. Read more

Security Leftovers

  • Teardrop Attack: What Is It And How Does It Work?
    In Teardrop Attack, fragmented packets that are sent in the to the target machine, are buggy in nature and the victim’s machine is unable to reassemble those packets due to the bug in the TCP/IP fragmentation.
  • Updating code can mean fewer security headaches
    Organizations with high rates of code deployments spend half as much time fixing security issues as organizations without such frequent code updates, according to a newly released study. In its latest annual state-of-the-developer report, Devops software provider Puppet found that by better integrating security objectives into daily work, teams in "high-performing organizations" build more secure systems. The report, which surveyed 4,600 technical professionals worldwide, defines high IT performers as offering on-demand, multiple code deploys per day, with lead times for changes of less than one hour. Puppet has been publishing its annual report for five years.
  • Over half of world's top domains weak against email spoofing
    Over half of the world's most popular online services have misconfigured servers which could place users at risk from spoof emails, researchers have warned. According to Swedish cybersecurity firm Detectify, poor authentication processes and configuration settings in servers belonging to hundreds of major online domains are could put users at risk of legitimate-looking phishing campaigns and fraudulent emails.