<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>The Software Gorilla &#187; Web Security</title>
	<atom:link href="http://www.thesoftwaregorilla.com/tag/web-security/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.thesoftwaregorilla.com</link>
	<description>The Software Gorilla</description>
	<lastBuildDate>Wed, 20 Oct 2010 19:56:09 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>Twitter and Facebook face the wrath&#8230;</title>
		<link>http://www.thesoftwaregorilla.com/2009/08/twitter-and-facebook-face-the-wrath/</link>
		<comments>http://www.thesoftwaregorilla.com/2009/08/twitter-and-facebook-face-the-wrath/#comments</comments>
		<pubDate>Fri, 07 Aug 2009 19:05:40 +0000</pubDate>
		<dc:creator>Bruce Gruenbaum</dc:creator>
				<category><![CDATA[Commentary]]></category>
		<category><![CDATA[Social Media]]></category>
		<category><![CDATA[Facebook]]></category>
		<category><![CDATA[MySpace]]></category>
		<category><![CDATA[Social Networking]]></category>
		<category><![CDATA[Twitter]]></category>
		<category><![CDATA[Web Security]]></category>

		<guid isPermaLink="false">http://www.thesoftwaregorilla.com/?p=124</guid>
		<description><![CDATA[Like many others, I woke up yesterday morning to find Twitter down. While I was trying to check Twitter, my wife was trying to get at her Facebook page and was surprised at how slow it was. "The internet is slow!" she exclaimed. A few minutes later I caught the report on the fact that Twitter had experienced a denial of service attack. Based on today's reports, it appears that the denial of service attack was a Russian attack on a Georgian citizen who had made politically charged comments about the Russo-Georgian conflict last year.  Organizations around the world see social media as the future of customer growth and they are spending large sums of money on very expensive people to advance their social web marketing agendas, and therein lies the risk...]]></description>
			<content:encoded><![CDATA[<p>Like many others, I woke up yesterday morning to find Twitter down. While I was trying to check Twitter, my wife was trying to get at her Facebook page and was surprised at how slow it was. &quot;The internet is slow!&quot; she exclaimed. A few minutes later I caught the report on the fact that <a target="_blank" href="http://www.cnn.com/2009/TECH/08/06/twitter.attack/index.html">Twitter had experienced a denial of service attack</a>.&nbsp;</p>
<p>Based on today&#8217;s reports, it appears that the denial of service attack was a <a target="_blank" href="http://www.cnn.com/2009/TECH/08/07/russia.georgia.twitter.attack/index.html">Russian attack on a Georgian citizen</a> who had made politically charged comments about the Russo-Georgian conflict last year. As I&nbsp;will not use my blog to express any kind of political agenda, I will not make any comment about the incident that caused this. It is not important to the issue at hand. What is important is that hundreds of thousands of people were affected by a political argument between two people when one of them attacked both Twitter and Facebook and thereby denied service to the innocent bystanders.</p>
<p>Organizations&nbsp;around the world see social&nbsp;media as the future of customer growth and they are spending large sums of&nbsp;money on very expensive people to advance their social web marketing agendas. Anyone who knows anything about&nbsp;this will&nbsp;tell you that you cannot control the&nbsp;social media &#8211; you have to work with it. Your company has to learn to roll with the punches and&nbsp;leverage the&nbsp;goodwill of the networks&nbsp;of which&nbsp;you are&nbsp;a member.&nbsp;This means&nbsp;that your company has to use the standard infrastructures that are in place&nbsp;and therefore your company relies on Twitter,&nbsp;Facebook, MySpace and LinkedIn&nbsp;among&nbsp;others to get&nbsp;its message out.</p>
<p>The problem with those infrastructures&nbsp;is that&nbsp;your company cannot&nbsp;be guaranteed of their stability. This is the <a target="_blank" href="http://www.cnn.com/2009/TECH/07/16/twitter.hack/index.html">second attack on Twitter</a> in a few weeks. Facebook has been hit several times, too, and you can be sure that this will not be the last time. As these sites grow in popularity they become greater and greater targets for attack by people. The more they become objects of attack, the more they will be improved to resist the attacks, but one has to wonder how long audiences will be prepared to accept these kinds of problems. One only has to look at the radical decline of MySpace to understand how fickle people are and how quickly&nbsp;popularity can shift from one medium to another.</p>
<p>Francois-Marie Arouet, better known as Voltaire once said &quot;Better one lion than a pack of rats&quot; in reference&nbsp;the impending&nbsp;French Revolution. What he meant is that a pack of rats cannot make up its mind and each has its own agenda whereas with one lion you at least know what the rules are. Nowhere is this philosophy more applicable than with social media. You are allowing your business to be driven by the media &#8211; the pack of rats.</p>
<p>Remember, though, that the French Revolution happened anyway. You have no alternative but to let social media shape your business. And therein lies the risk. As a business trying to build a marketing campaign, it is easy to arrive at the conclusion that any one of these media could be used as the primary focus of the strategy. You may even conclude that you only have to focus on one or two of them to grow your business. Some companies have gone as far as relying completely on social media as there only marketing strategy. You have to make sure that your strategy has several contingencies to deal with what happens if those forums become unavailable as happened with Twitter yesterday.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.thesoftwaregorilla.com/2009/08/twitter-and-facebook-face-the-wrath/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Joomla update</title>
		<link>http://www.thesoftwaregorilla.com/2009/03/joomla-update/</link>
		<comments>http://www.thesoftwaregorilla.com/2009/03/joomla-update/#comments</comments>
		<pubDate>Sun, 22 Mar 2009 00:30:34 +0000</pubDate>
		<dc:creator>Bruce Gruenbaum</dc:creator>
				<category><![CDATA[Drupal]]></category>
		<category><![CDATA[Joomla]]></category>
		<category><![CDATA[Web Development]]></category>
		<category><![CDATA[CMS]]></category>
		<category><![CDATA[Content Management Systems]]></category>
		<category><![CDATA[Web Security]]></category>

		<guid isPermaLink="false">http://www.intangere.com/tsg/?p=22</guid>
		<description><![CDATA[A little while ago I wrote an article on my blog about Joomla. I have had a few off-line comments about the article and as they were not written here I have decided to treat them as private responses and not publish the author&#8217;s names and their comments. But there were some very valid suggestions made [...]]]></description>
			<content:encoded><![CDATA[<p>A little while ago I wrote an <a href="2009/03/joomla-an-interesting-platform-for-web-ui/">article on my blog </a>about Joomla. I have had a few off-line comments about the article and as they were not written here I have decided to treat them as private responses and not publish the author&#8217;s names and their comments. But there were some very valid suggestions made that I believe others may benefit from so I would like to include some of these comments as well as my take on them.</p>
<p>A number of people have pitched Drupal to me as a competitor to Joomla. One person wrote:<br />
<em><br />
&#8220;When we surveyed content management systems &#8230;, Joomla was one of the ones we looked at, but on balance Drupal won out. I recently converted my &#8230; site to Drupal and brought up two other sites &#8230; on the same code base, but with very different appearance and different features on each. I am very impressed.&#8221;<br />
</em><br />
I have spent some time evaluating both of these content management systems and while I have chosen to go with Joomla myself, Drupal could probably have done the job I wanted to get done. My initial post was in no way meant to imply that Drupal was not equaly as capable. There were a couple of things that swayed my vote to Joomla.</p>
<ol>
<li>By the time I looked into Drupal, I already understood how Joomla worked. The argument that Drupal is easier to use therefore did not carry the water for me that it would for others and I felt like Joomla&#8217;s flexibility was probably better than Drupal&#8217;s provided I was willing to make the investment;</li>
<li>I am not scared of getting my hands dirty with PHP, MySQL, CSS and XHTML. That means that if I find an obstacle with Joomla, I have the flexibility to get into it with these technologies if I need to; and</li>
<li>I like what Joomla has done to address and caution against security issues within Joomla itself. Security is a very real consideration for any web-site and I think the Joomla team understand this. They may not have all the answers but they definitely understand the issues. You should at least look at the <a href="http://developer.joomla.org/security.html" target="_blank">Joomla security site</a> and their <a href="http://forum.joomla.org/viewforum.php?f=432&amp;start=0" target="_blank">security forum</a> before you implement a site using Joomla.</li>
</ol>
<p>In fact, it is the latter point that made me realize I needed to take down my family site while I work on making sure that I have dealt with any potential security threats. It will be back up in a couple of weeks. </p>
<p>In a discussion on the issue, someone I was talking to made the statement that they did not want a content management system that required a database because of the administration issues associated with it. To me, that argument does not make any sense because if you go with static HTML instead, you still have the complexity of managing the content and determining what the broken links are. With a good content management system, that process can be easily automated. So although you may not have the expense of the database maintenance, you do have the expense of the static HTML management. Most of the maintenance stuff around my 4 Joomla installations is all automated anyway and I simply check the e-mail that I get on a nightly basis to verify that the backup verification process worked. Moreover, there is so much functionality that you simply get for free that I would hate to have to write manually.</p>
<p>Finally, a gentleman by the name of <strong>Jeff Pilant </strong>pointed me at a web site that is absolutely invaluable on the security side of things. The site calls itself &#8220;<a href="http://cwe.mitre.org/top25/" target="_blank">Common Weakness Enumeration &#8211; A Community-Developed Dictionary of Software Weakness Types</a>&#8221; and it enumerates 25 of the most dangerous mistakes that developers make that can create serious security threats in their code. This is a highly recommended read. The information is also available in PDF form and although a lot of this information is available in a number of the security books that are already out there, this is a very valuable and concise reminder.</p>
<p><a class="a2a_dd a2a_target addtoany_share_save" href="http://www.addtoany.com/share_save#url=http%3A%2F%2Fwww.thesoftwaregorilla.com%2F2009%2F03%2Fjoomla-update%2F&amp;title=Joomla%20update" id="wpa2a_2"><img src="http://www.thesoftwaregorilla.com/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></p>]]></content:encoded>
			<wfw:commentRss>http://www.thesoftwaregorilla.com/2009/03/joomla-update/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

