Are you the only person who can tweet on your twitter account? The answer is probably "no".
As I checked Twitter this morning, I found a number of tweets from a friend that related to Miracle Berry product. Amazing Weight Loss products have nothing to do with her business. I sent her the following:
As we all know, the Internet is a pretty wild place. You have to keep your doors locked. The locks include firewalls, enforcement of strong password policies, attention to and fast application of software and system updates. Another thing you can do is to keep an eye on activities and warn your neighbors. Please be advised that this site is doing that.
I got an email today from a Yahoo subscriber that had no subject and contained only a link to a website. The website claims to sell pharma products, but looking more deeply into the page, appeared to try to do a lot more. There was a lot of JavaScript getting loaded and it wasn't clear what it was about to do.
At some point, the password for the sender's Yahoo account was compromised. Although the horse is out of the barn, it's still worth securing the building.
This server is a very small fish in a very big pond. This morning, some guy in Vietnam (or some bot running through an IP address there) decided to see if it could hack in by throwing a lot of different login and overrun attempts at the web service. I have a reasonable set of firewalls between the system and the 'net, but when you have a web server, you have to keep that port open. The solution requires real-time analysis and action based on the traffic coming in to the web server. I'm a little guy and commercial software to do that is expensive. But there's a powerful, free, open source solution, OSSEC.
As we all know, the Internet is a pretty wild place. You have to keep your doors locked. The locks include firewalls, enforcement of strong password policies, attention to and fast application of software and system updates. Another thing you can do is to keep an eye on activities and warn your neighbors. Please be advised that this site is doing that.
