Archive for the ‘Security Issue’ category

3 Ways to Protect Your Blog from Click fraud!

July 13th, 2009

Hope you read the post titled “Can I Block Your AdSense Account? Yes, I Can! Sharing How?”. If not do it now! So, let’s learn how to protect our blogs from this click fraud. These tips are only for small scale business blogs and personal blog.

Let’s come to the point directly. As you know how important is your adsense, hope you also understood how important is to protect it as well. There are only 3 ways to protect as far as I know. Among the 3, 2 are free ways and other being paid service. Here are those…

Monitor Incoming IP’s: An abnormal number of clicks from the same IP is the sign of click fraud directly. Monitor your traffic once in a week at least. Watch the IP’s versus clicks/visits generation. If you found any IP with suspicious behavior, that’s may be the IP which can block your Ad network account. Make this as a practice and protect yourself.

Handover suspicious guys: Make the practice of reporting suspicious behaviors to search engines and ad networks. This can protect you and others as well.

Hire a watchdog: There are many paid services out there, who can watch your blog moments round the clock. If you’re a fast growing blog owner and found any suspicious behaviors around, then better to contact one of those guys to monitor you. For example, PPCTrax.com is one of the service handling 30 or more clients already. Billing starts from the cost $30 for small scale businesses.

There are many other big guns making use of these services already. Let me give you couple of names for example, online news leader’s bbc.com and Reuters.com are among them who are using the services already to protect themselves.

First 2 things are free and suitable for us. What do you say? Any other tips you want to add? Let’s share together! Happy Blogging!

Scan: Free WP Themes for Malicious Code..!

July 13th, 2009

wordpress is so popular because of the available free Themes & Plugins out there. Right? Yes, it’s true. But how many of you think about the security in download that free stuff? Nobody I guess. We have millions of free themes out there for download. We just click download and upload, but think twice before hitting upload.

Don’t trust the developer; there is always a possibility to inject some malicious code in those themes. That’s where this plugin helps you to scan those themes easily. Plugin called TAC will do that for you.TAC stands for Theme Authenticity Checker.

TAC searches the source files of every installed theme for signs of malicious code. If such code is found, TAC displays the path to the theme file, the line number, and a small snippet of the suspect code.

Protect Your Blog from iframe Malicious Programs..!

July 13th, 2009

Is your blog safe? Or hacked by some malicious Trojan horse? You can’t answer until you open and see your code and control panel. Heard that many of the blogs are hacked by some Trojan horse and resulted in click fraud. This led to adsense account blocking.

All most all the attacked blogs resembles the same behavior. That is symptoms like sudden increase in traffic, increase in AdSense revenue and etc… I read some of the blogging gurus telling not to see the stats daily either blogging or revenue stats. That may lead to failure in finding the things before the damage.

I always recommend monitoring your traffic and revenue daily. If you found any sudden increase in either of them, immediately contact your hosting provider and AdSense team. By this way you can prevent the damage to certain extent.

By the way, on the account of all these news on forums, I contacted my hosting provider to update the things on these account blockages and viruses and asked the suggestions to protect myself. I got few replies from the team, which made me stranger.

They gave some information and links to educate ourselves. That made me to prepare this long post, here is all the information and links I got…

Info Source 1:

Make sure you have correct permissions for your website files. Also keep changing passwords every week with secure ones. Few of the issues we found with some sites hosted in our server is discussed at following link. Problems occurred due to customer set wrong permissions to their website files. So be careful, and go through the article at following link. Hacking occurs with customers who use crack and patch in their local computer. When they run cracks or patches, gets infected with Trojan and which steals passwords. These stolen passwords are further used for hacking and modifying web pages.

Info Source 2:

Only point to remember is, do not give write permission for files which doesn’t need it. Many times, instead of giving write permission for few necessary files/folders, we have noticed, people give full control permission for all files. This is done because of laziness or not aware of issues related to such actions. Usually for all files need only read permission to public. If you give write permission, using some tools, hackers can alter your site files without logging into ftp or your account. What they usually do is insert iframe code or java script code to distribute malicious programs to the visitor’s computers. When Google finds such sites which distributes malicious code, includes in black list. Another important point is keep your web applications up to date with all security patches or updates applied. Hacker’s uses well know vulnerabilities in popular open source application, if you don’t update them periodically.


Iframe / Virus in Website Pages, How to Fix Iframe issue

July 13th, 2009

The reason why this virus comes is only because of the either of the following :

1) You have a weak 7 vulnerable code on your website which is exploited by a hacker.
2) Your ftp password is weak and generally a dictionary word which is cracked by brute force attempts.

How Iframe Virus Works?
The hackers behind this have not actually “hacked” into servers, but are using the Webs OWN programming errors to inject this code into search results pages created by the Web sites OWN internal search engines!

The hacker searches for popular keywords, like “furniture” on the Wal-Mart Web site using its internal search engine. But instead of running a normal search, the (hacker?) adds on an HTML command to the end of his search string. HTML = hyper text markup Language…the stuff we write websites with mainly.
This command then opens up an invisible “iframe” window in the victims browser which then redirects to a malicious Web site, which then (if successful) installs fake antispyware or a version of the “Zlob Trojan Horse” – a malware on the victims (meaning YOU) PC.

And hear this! These (hackers) actually have great Google rankings!!
In order to boost their Google rankings, Web sites often save a copy of these search results and submit them to Google. When a victim searches Google for the keyword, these cached search results then pop up, with the malicious code now inside them.

How the hack is done?
Client side PC infected with virus.
Virus gets FTP username/password from the FTP clients.
Using the username/password, the virus downloads the index files, add iframe code it and re-uploads it.
The iframe code points to the same virus. So, anyone accessing this website gets infected with the same virus, and it uses the FTP username/password to spread again!!!!

Solutions #

1) Ensure that your code is free from such kind of vulnerabilities.
2) Change all the ftp passwords and keep them safe & a combination of alpha + numbers + special characters like ^%$@^#%
3) Before updating the new password in their FTP clients, advise them to do a full system Virus scan with a reliable virus scanner updated with the latest virus definition files.
4) Advise the clients not to save ( remember ) the FTP username/password on FTP clients.

Comprehensive Guide to Keyword Research, Selection & Organization, Part VIII

April 17th, 2009

This is part 8 of a 12 part series on keyword research. This series will guide you through four distinct phase of the keyword research process, providing you step by step guidelines to help you gather, sort and organize your keywords into an effective marketing campaign.

I’ve been sick for the past week so my apologies for any of you eagerly waiting for the concluding posts in this series. Let’s go ahead and jump right back into it.

Phase III: Analyzing and Eliminating Keywords

After having researched through your relevant core terms and search phrases, it’s time to start the process of looking more closely at each phrase. What you want to do is separate the good keywords from the not-so good. You need to find the search phrases that will ultimately provide you with the greatest benefit in your marketing campaigns, and eliminating or sidelining the rest.

Selecting high ROI search phrases

Once we place all of our search phrases in a spreadsheet organized by core term, we can begin to sort through what’s there and more carefully consider the appropriateness of each individual keyword phrase. There are several types of phrases that we’ll look at. Each type of phrase has a particular value to your campaign. While some types of phrases will be more or less valuable than the other, some are just a matter of degrees.It’ll be up to you to determine whether any particular keyword warrants being kept or eliminated based on the whole of the search phrases uncovered.

Single-word keywords

Single word search phrasesSingle-word queries generally produce the highest volume of searches, but also the lowest amount of targeted traffic. Many searchers start with single-word keywords only to find that the results produced are not targeted for their specific need or intent. They then go back to refine their search, often multiple times, using various word combinations, until they find the best combination of words that gives them the results they need.

Let’s say you’re looking for a doll for your daughter, niece or friend’s kid. You may start your search at Google, typing in the word “doll.” After getting a glimpse of the search results you realize that you have to think through this just a bit more. Are you looking for a large doll, small doll, a cartoon doll, an action figure doll, a Raggedy Ann doll, a Barbie doll, a celebrity doll, a bratz doll, or a dollz? The possibilities at this point are limitless. So you go back and refine your search to be a bit more specific for what you want.

Many single-phrase searches are performed this way. The searcher just uses that as a starting point until they realize that it doesn’t produce the results they need. Others use single word searches as a way of getting some “search education”. They’ll look through the results of whatever they typed in (this is true for both single and multi-word phrases) to find new words that they’ll use to go back and refine their search.

For example looking at the results for “doll” can give me the idea to search for “bratz doll” or “barbie doll”. Even if those words are not in the results, the initial search may jog the searchers thoughts a bit to help them come up with better search refinements on their own.

At this point, it doesn’t matter that you rank well on the single-word phrase because most searchers will simply not find what they need, even after clicking through a handful of sites.

Also, keep in mind that broad, single-word terms, while attractive by the sheer number of hits they potentially produce, are often virtually impossible to get ranked well for. So the question becomes, why waste the time and effort in promoting a term that is far less likely to generate the sales you want when other terms are more viable?

Multi-word phrases

Multi word search phrasesWhen looking at the search volumes for your search phrases you’ll often see that single-word terms tend to get significantly more search volume than multi-word phrases. Don’t let that fool you. When you total up all the multiple-word phrases it’s almost universal that they get significantly greater search volume than the single word phrase.

Recent studies have shown that two- and three- word queries are searched in greater numbers than single-word queries. And since multiple-word queries generally produce more targeted traffic, it makes sense to put your optimization time and investment into these queries. Proper selection and targeting of these multi-word phrases will result not only in greater traffic volume to your site overall, but a higher conversion rate as well.

In addition, you can target multiple multi-word queries on a single page giving you even more opportunities for exposure. The more multi-word queries optimized the greater spread you’ll get in the search results, producing higher levels of targeted traffic. The key to this, however, is making sure that you optimized for multi-word phrases that have a decent amount of search volume associated with them.

While making sure your phrases are as targeted as possible for your audience, it is important to go after phrases that register at least a measurable amount of search volume each month. Keyword phrases that have no search volume, no matter how targeted, generally won’t do anything to increase business or sales.

Multiple phrase variations

Multiple phrase variationsEvery core term will have multiple phrase variations that can be optimized together on a single page. We’ve discussed this a bit already during the research phases, but it should not be neglected here.

When analyzing keywords you’ll find that a lot of additional traffic can often be gained, with very little effort, simply by targeting certain phrase variations. Search words such as “pontiac used cars” can often be changed, using plurals, singulars and stems (such as “ing,” “ed,” etc.,) to another traffic-producing phrase such as “used pontiac car.”

It’s entirely possible that the latter won’t show any sort of measurable search volume, but thats not to mean it should be discounted. Adding stemming and/or changing word order can create many more opportunities to be found by longer-tail searches. Targeting this variation takes very little additional effort and even if searched infrequently, can produce sales when it is. The ROI on these variations is pretty fantastic.

Don’t get yourself locked into using the keyword phrase precisely as it is most often searched. Even if the stemmed variations show little search volume, the combination of these variations can be significant. When working these variations into the content, always be sure to write naturally. If it can’t be worked in properly, don’t force it.

Localized phrases

Localized phrasesIf you are targeting an audience specific to a geographic location, keyword research can become a bit difficult. Most tools don’t do a good job measuring search volume on localized phrases except for very high-population areas where lots of searches are performed. Localization is one of those areas where search volume is mostly meaningless.

The key to researching for localized phrases is to not worry about researching for localized phrases. Do all your research as you normally would and then localize them later. You can do this by taking your standard keyword research and then placing your geo-qualifiers before or after (or in the middle) of your search phrases. Qualifiers such as city, county, state or other local references such as city districts or zip codes are most common.

Localizing your phrases is essential for businesses that do business only in their local area. Ignoring localization and going after broad non-localized phrases will increase traffic, but create additional headaches as well. By attaching local qualifiers you’ll eliminate phone calls and email inquiries from non-customers. This frees you up to take care of customers that help pay your bills.

We’ll leave off here for now and tomorrow we’ll discuss the last three things to consider when selecting keyword phrases.

The Insecurity of the Open-source CMS

April 13th, 2009

Open-source content management systems are incredibly popular these days. Unfortunately, one issue that has always plagued this type software is security. On the surface, it would seem as if open-source software is more secure than commercial products based on the reported number of security vulnerabilities and activity in the community. However, this is far from the truth and a misconception that has resulted in trouble for many website owners. With a proprietary solution such as the Microsoft Content Management Server, you are generally provided with support and insurance against security flaws. With open-source solutions, you are forced to rely on the support of the software’s developers and user community which means that nothing is guaranteed.

Elements of CMS

The open-source CMS consists of various elements, many of which contribute to vulnerabilities. The average software includes add-on modules, encryption mechanisms and a plethora of scripting errors. These elements can simply be a part of a certain product or included into the entire system. Completely securing such an application on a web server is no easy task. All publicly accessible server applications are designed for around the clock availability, providing access to visitors and attackers alike. Without the proper security implementations, an open-source CMS is essentially wide open for an attack.

Insecure software can inflict a significant amount of damage, especially when it comes to a program as functional as a content management system. When vulnerabilities in such software are exploited, the best result could be the defacing of your website. The worst case scenario would be the exposure of sensitive data that blemishes your credibility and possibly ruins your business. There have been various reported instances where vulnerable systems resulted in the leakage of Social Security numbers, credit card details and other personal information.

Joomla, Drupal and other CMS Targets

It is no surprise that some of the most widely used open-source content management systems such as Joomla and Drupal are among the most targeted on the web. The fact that the source codes of these systems are freely available and have numerous installations make them a prime target. While the average visitor can’t distinguish between a commercial and open-source product, they tend to be easily identifiable to attackers. A simple web browser along with the viewing of URLs and HTML patterns in search engine results can give a hacker all the information they need to strike.

One of the most attractive aspects of the open-source CMS is that you can customize and actually own a particular product. On the other hand, because the software is originally developed by someone else, it is very likely that there are a few things you don’t know about the program, meaning you can’t ensure security after making changes. This is why many open-source systems include disclaimers against third-party modification as well as the overall security of the software, basically telling developers to use at their own risks.

With so many people handling the code, it is unpractical to think that any open-source CMS will ever be 100% secure. The best thing you can do when relying on these solutions is to understand the risks, make sure you are using the most recent versions and design your web pages with caution. Attackers are persistent but not nearly as powerful when their methods of attack are limited.

Domain Keys in the Fight Against Phishing

April 13th, 2009

Anybody with an email address is likely to have countless amounts of phishing messages in their inbox, and they may not even realize it. This type of threat usually doesn’t come at you with the attention-grabbing headlines of advertising spam or the unbelievable plots attached to the fraudulent messages carrying Nigerian scams. In many cases, a phishing message doesn’t look much like spam at all, even though it is a well crafted plan to steal your money. Believe it or not, a large number of people have fallen victim to this clever scam so it is important that you know how to recognize and avoid it.

What is Phishing?

Phishing is a sophisticated scam based on social networking. Unlike other attacks where intruders rely on vulnerabilities in a server or website application, these scam artists would prefer that the system remain intact. Instead, they look for vulnerabilities in the actual person themselves, hoping they can find someone who is trusting enough to believe the alarming message in their inbox and respond or follow the provided link.

There are essentially two types of phishing. One approach involves a scam artist sending you an email and purporting as a representative of an institution you do business with. This could be any type of company from a bank to someone pretending to be affiliated with PayPal or eBay. They will inform you that there is problem with your existing account and that your login credentials are needed to fix it.

The second approach is similar yet distinct from the method above. A phony representative attempts to alarm you by stating that there is a problem with your account. However, they don’t ask for you to respond with your login credentials, but simply follow the provided link so they can either verify your personal information or correct the problem. After clicking the link, you are not redirected to an official online banking or PayPal website, yet a rogue site that looks strikingly similar, so much that distinguishing it from the real deal might be difficult. Upon entering the requested information, you are essentially handing over the keys to your valuable assets and possibly your identity.

So, what role will DomainKeys play in the fight against phishing? As a product owned by Yahoo and integrated into its web-based mail system, the technology will help to protect you against email scams in the following ways:

Website owners register their Domain Name Servers with the DomainKeys system from which emails are required to be transmitted from a registered server.

DomainKeys incorporates an additional header to message, identifying the sender’s domain name server to verify where the message originated.

The message is then verified by the web-based mail system which analyzes the header to ensure that it originates from where it claims. If the header isn’t validated, the message is automatically sent to a spam folder.

Yahoo has been working to push DomainKeys as a standard for web-based anti-phishing for sometime now. With Gmail recently picking up the technology, it’s very likely that it will become standardized in the very near future. Unfortunately, internet criminals are quite persistent and seem to find a way around the most efficient security mechanisms. Whether you use a free web-based mail system by Yahoo, Gmail or through your own website, the best advice is to never respond to a suspicious email or click on any links. If a message appears legitimate, contact the company personally and speak with an official representative. This will determine if someone was trying to bait you with a phishing scam.

Browsers Aiding in Website Attacks

April 13th, 2009

Website attacks are on the rise with intruders using an array of hacking techniques from cross site scripting to SQL injection. Although careless development and insecure applications play a major role in a site’s vulnerability, the typical web browser is a contributing factor as well.

Despite the fact that several improvements have been made, none of the top web browsers are completely secure. Because of this, many web security experts are projecting that website attacks will continue to be an issue. The combination of enhanced functionality and the lack of adequate security implementations have left a number of browsers vulnerable to sophisticated attacks. Some researchers are saying that the increasing number of exploits is the direct result of Web 2.0 technologies and advanced web hosting features.

Evolution in Technology Opens Doors to Further Threats

Things were fairly innocent in the early days of the internet when static pages were prevalent, before technologies such as JavaScript and Active X came into play. Today’s World Wide Web is dominated by dynamic web-based applications and complex server-side scripting languages, factors that enable browsers to be used in various ways to exploit websites. Gary McGraw of Cigital, a software security company, agrees that these feature-rich designs have made browsers far less secure, stating that they are structured more like complete operating systems.

This past September Google released Chrome, its new web browser which was immediately faced with stiff competition in the form of Microsoft Internet Explorer, Mozilla Firefox, Apple Safari and Opera. While internet users have a wide variety of browsers to choose from, the options are still limited in terms of security, including Chrome. Experts contend that the browser war of who can out do one another in the feature department is what ultimately leads to these security vulnerabilities.

Though quite serious, the security issues associated with today’s popular web browsers are not attributed to a lack of effort. Some say that developers are doing all they can but when considering the fact that website attacks such as cross site scripting and cross site request forgery are typically the result of design, these flaws tend to be much harder to fix than bugs found in software code. Observers suggest that the vulnerabilities are not going to disappear entirely but do stress that browser developers can do more to enhance security.

In general, development teams only have a little time to address browser vulnerabilities before the hacker community is able to discover them. Developers are being encouraged to practice browser security just like those who make other software products. This is extremely important as the major web browsers literally have hundred of millions of users. One solid approach towards website security is standardized authentication, something that would need to be addressed by system administrators. Another recommendation is for browser developers to design products that alert users when they are being directed to intranet zones such as localhost or RFC1918 as attackers are increasingly targeting internal devices. Security firms have also predicted that the manner in which data is handled when requests are made between a browser and website should play a critical part in future designs.

How to Find Secure Shared Hosting

April 13th, 2009

If you are looking to save money on building and managing a website, shared hosting may be the way to go. Shared hosting is incredibly affordable these days, so much that you can have a personal or business website for just a couple of dollars a month. What makes this arrangement so affordable? With shared hosting, you are literally sharing disk space and various resources with other customers. This allows the web hosting provider to rake in guaranteed profits while keeping expenses to a minimum. Shared hosting is very economical but there are some drawbacks to this type of arrangement, mainly security.

The major issue with shared hosting has always been the same – the availability of security and the fact that this platform can only be so secure. Without adequate protection, the web host’s server is vulnerable to a wide range of threats including DDoS attacks, malware infection and network intrusion. You could also be exposed to attacks such as SQL injection, cross site scripting and even the malicious actions of your neighbors on the server. When your hosting environment isn’t properly secured, you stand the risk of losing the most sensitive of information.

Security is definitely an issue in the shared hosting environment, one that could make the low cost an uneven trade. The good thing is that several web hosting providers are aware of these vulnerabilities and they are taking the necessary approaches to deliver a secure service. When looking for a company to host your site, we recommend keeping the following security considerations in mind.

Protection from Thy Neighbor

When assessing the security of a particular web host, you must not only analyze the protection offered against outside threats, but security that keeps you protected against other website owners on the server. You never know who you’re sharing the server with, as they could be into dealing porn, distributing spam or malicious software. A few of your next door neighbors just might be prolific computer hackers. To keep yourself protected in this regard, you should make sure the provider doesn’t allow any unsolicited code to be executed or access to your directories.

Clean Code

One of the biggest threats to your website lies in the code used to build your applications. When they are not properly scripted, intruders can use them as an entrance to your data and reap major havoc. You can minimize the possibility of common website exploits by ensuring that the web hosting company offers the latest in development tools whether its PHP and MySQL or ASP and MS Access. Most importantly, it is up to you to make sure you are coding your applications and web pages in a secure manner.

Security Features

There are also a number of features that will give you an idea of how secure a particular web hosting platform is. This includes protection for the actual server such as software that defends against DDoS attacks and viruses as well firewalls and network intrusion systems to fend off hackers. If your site is to involve online business transactions, you will also require SSL support to protect your customers’ credit card information. When making sure all the vital security issues are addressed, you can better your chances of enjoying a smooth run in the shared hosting environment.

The Dangers of Insecure Web Applications

April 13th, 2009

Software can be used for many great things but there is a gloomy dark side. It also comes in the form of malicious programs and the web is literally infested with these harmful applications. Sadly, thousands of internet users download malicious software everyday, blind to the fact that they are essentially inviting threats right into their systems. These risks have the potential to be even more dangerous when a website is involved. Any software code running on a web server poses a great threat for the mere fact that it contains an executable file. This means that it can be executed by anyone in the world with an internet connection. Just imagine if there was an executable file on your desktop computer that could be executed by anyone at anytime. If this was the case, that program would have to completely secure in order to prevent the execution of malicious code on your system. The same goes for programs consisting of PHP or CGI scripts.

What makes executable programs even worse is that many of them accept parameters such as a user name or email address, making them more vulnerable to exploitation. Needless to say, the web was a lot safer some five to eight years ago when the internet phenomenon wasn’t as huge. Today, hackers are highly skilled and more determined than ever. They will do whatever it takes to break into home-based PCs, network servers, and even the applications on your website. If your scripts are not probably secured, you stand the risk of losing essential data that can stir up all sorts of trouble.

Here are just a few examples of what can happen when your scripts are not properly secured:

Hijacking of your mail server: You may ask, “what’s the point?”. The answer all boils down to legality. Although you couldn’t tell on the surface, spam is illegal in most countries and if the authorities catch you doing it, you could find yourself in big trouble. By hijacking the mail server, a spammer can use your domain to distribute mass mailings of spam. When the authorities find out, it all leads back to you.

Hijacking of your website: Ever run across a family-friendly site and wondered why is was littered with pornographic images? This my friend is website hijacking, more commonly known as defacing. A poorly configured script can invite an intruder into your site, give them enough time to setup their own credentials and leave you out in the cold.

Attacks on other machines: Leave the door open for a hacker and they just might force you to participate in a strike against other machines. Known as a DDoS attack, the hacker slips through your insecure script and installs a rootkit which opens a backdoor that gives them complete control over the server. This could eventually cause problems for both you and your web host.

With the responsibility of administering the server, it is up to your web host to provide a secure environment. As a webmaster however, it is up to you to make sure your web applications are properly scripted and secure. Software can add instantly functionality to your site but if you’re not careful, it can also be your worst nightmare.

PHP Freelancer