Cloud authentication: locked out of your home?

On Wednesday, October 10th, it was reported in the Daily Mail and The Register that the security company Yale had unplanned network maintenance which caused their cloud service to go offline for 24 hours. Please bear with us, we apologise for any inconvenience caused. *Please note this issue affects all of our app-controlled alarm systems, … Read more

Google Chrome breaks the world-wide-web – www and m subdomain hidden in address bar

Google Chrome has recently made the unpopular move to fundamentally change how URLs are shown in the browser. In almost all browsers (except Safari, below), the full URL is shown in the address bar, https protocol and all. However, with version 69 of the Google Chrome browser, a change has been made to attempt to … Read more

Are your S3 buckets private?

Alongside checking your backups are working, updating your systems, checking for viruses, and all the other monthly tasks, it’s easy to overlook simple security areas of your network and storage. Over the past few months, there have been a deluge of exposed Amazon S3 buckets which have been exposed or found. The data of 123 … Read more

Are Cloudflare to start their own Public DNS?

It’s heavily rumoured that Cloudflare will soon be announcing a Public DNS server. Their website, every1dns.com is currently empty, but Google have a cached version of the site available. The two DNS servers, easier to remember than Googles are said to be 1.1.1.1 and 1.0.0.1. According to their website, both support encrypted DNS as well … Read more

UK Gov sites hijacked by Cryptominer, and Subresource Integrity

Over the weekend, thousands of websites around the world, including the UK’s NHS and ICO and the US Government Court system, were compromised, and caused visitors to mine crypto-coins – generating money for the miscreants. These sites were using a popular plugin called Browsealoud. Their support software “adds speech, reading, and translation to websites facilitating … Read more

Plan your Upgrade Process

Whilst designing new websites, it’s common to use an off-the-shelf theme as basis for a new site. However, making changes to a theme or plugin can cause problems when it comes to upgrading. When making changes to plugin or theme code, it’s important to be aware that when these plugins or themes are upgraded – … Read more

Mozilla Observatory – Test your SSL

Mozilla have put together a tool for testing many areas of SSL security. We’ve recently discussed using the free Let’s Encrypt service to secure your site, but it is also important to ensure the security settings are up to date. “While we’d love to say that any site that scores an A+ on the Observatory … Read more

Keep up with Magento 1.x and 2.x Maintenance

Probably the most tedious part of running a website is the constant maintenance and updates. Continuing our previous post on WordPress, we’ve put together a quick guide of routine checks and changes for both Magento 1.x and 2.x. A poorly maintained website can be a security nightmare, or even impact on your website appearance and … Read more

Keeping up with WordPress Maintenance

WordPress maintenance is a tedious and thankless chore, but absolutely essential to the smooth-running of your website. A poorly maintained website can be a security nightmare, or even impact on your website appearance and search position with potential attacks and spam. We’ve put together a basic list of the most essential WordPress maintenance; Backups A … Read more

GDPR Panic!

The General Data Protection Regulation (GDPR) comes into effect on 25 May 2018. Set out as Regulation (EU) 2016/679, it is intended to strengthen and unify data protection for all individuals within the European Union (EU). However, is it seen as a major struggle for companies who are affected by it. Many companies, large and … Read more