cPanel Security Update: CSRF (cross-site request forgery)

admin — Mon, 22 Mar 2010 00:35:15 +0000

cPanel is a well known web hosting control panel utilized by major hosting providers around the world. In response to a recent security articled, cPanel, Inc. is issuing a response to customers, service providers, end users, and 3rd party developers that utilize the software.
A CSRF (cross-site request forgery) attack occurs when an unauthorized command
is propagated from a user’s browser to another target session without the user’s knowledge. For users of cPanel products, this can occur while logged into the control panel and an outside website causes you to execute specific commands that modify settings within your control panel. You must be logged into your control panel interface and the creator of the attack must know specific information regarding your control panel environment in order to successfully complete the CSRF attack.

cPanel Developers and System Administrators are recommending a number of steps to help reduce risk associated with this type of attack.

Do not remain logged into any web applications or interfaces while browsing untrusted sites. Always completely log out of browser sessions for sensitive sites when activities have been completed.
Avoid opening SPAM, Websites, or clicking on links that you do not
trust especially URL shortening services found on many social media
sites.
Update your current passwords within cPanel on a regular basis and
maintain strong password discipline.

Security is a top priority for cPanel. In an upcoming update to cPanel, new technology will be provided to mitigate CSRF attacks against cPanel’s products. This new security feature is currently undergoing critical quality assurance testing and will be released once verified. Enabling the new security feature will be an optional configuration and will require the testing of remote applications and integration methods used in conjunction with cPanel software. cPanel has been directly working with software vendors, and application vendors to educate them on the upcoming changes with 11.25.

cPanel is committed to providing ongoing communications with customers and end users of software features, security, and ongoing support issues. When security reports are provided through proper channels, a public response will be provided to help reduce the overall risk of specific events. cPanel will provide updates to the affected parties through the proper channels.

Related posts brought to you by Yet Another Related Posts Plugin.

3 Differences between Shared and Dedicated Hosting

admin — Tue, 16 Mar 2010 15:45:18 +0000

When it comes to making the all-important choice of what web hosting method to use the choices come down to shared hosting and dedicated hosting. There are so many arguments arguing for both shared hosting and dedicated hosting. Perhaps it is time to shed a little light on this web hosting dilemma.

First of all, let's deal with the all-important question of server access. Needless to say, if you choose to use shared web hosting you will be sharing space with other businesses. Now your parents may have told you it is good to share but that is not always true in the world of web hosting. In the world of web hosting shared is synonymous with limited access.

A limited access approach to web hosting means that your access is limited through a control panel that is provided by the hosting provider. And if the web hosting provider is in charge of the control panel then they are in control of your access. A lack of control to your web hosting means a lack of control for every part of your web hosting needs.

On the other hand, a dedicated hosting server gives you complete and total access. Now doesn't that sound a lot better? Full access in the form of dedicated hosting means that you get the final say in all web hosting decisions. Dedicated hosting also gives you access to the remote desktop manager, which allows you to have access to the machines desktop.

Next we look at web hosting from the perspective of exclusive use. Getting back to the concept of shared web hosting, the question needs to be asked, how much do you like to share? With shared hosting you are sharing a server with roughly 500-1000 other websites. Wow, that's a lot of neighbors in your cyber neighborhood. With these many other websites clamoring for web hosting you may not always have access to all the server's resources. Other websites may be taking up more web hosting resources than you are.

A dedicated hosting service however, gives you exclusive access to all the resources the dedicated hosting server has to offer. Your information alone is responsible for the performance of the server.

Finally lets deal with scalability in regards to the issue of web hosting. Most shared web hosting services do not allow you to install your own applications on the web hosting service. They have a set configuration and they do not go outside the box, thereby limiting your growth.

A dedicated hosting service gives you complete control. Your IT department can install any applications that are necessary for your web hosting needs. Again more control means a more effective web hosting service.

So all in all, it would seem that dedicated hosting is a far more viable option for most businesses web hosting needs. Dedicated hosting gives you more control and, in the world of web hosting, it's all about control.
limiting your growth.

Related posts brought to you by Yet Another Related Posts Plugin.

Tikier Hosting » control

cPanel Security Update: CSRF (cross-site request forgery)

3 Differences between Shared and Dedicated Hosting