Hackers Aren't Always Your Enemies

27 Sep 2010

I know this is a concept that will make many web developers drop their black morning coffees in horror, but hackers can help realise the true capabilities, and often more importantly, true capacities of your website.

The second is something government websites worldwide, including in Ireland, get direly wrong, to the extent they go under when put through their paces by minor hacking attempts, and general mass access.

Hackers - The Mindset

It is kind of funny, not all hackers are that bad, and I'm not just talking about ethical hackers, whom are like truly great. I once had a hacker who said by email, rather oddly "...Look, I am exploiting websites with this hole in Joomla, I came across this site, but it seems to be a small corporation, and I am only out to get the big capitalists, secure the admin directory and it will be fine..." I was fairly stunned, but grateful, and thanked him / her. Of course not all hackers are like this, but generally most have no interest in taking down small websites, which sometimes get tangled in automated hacking attempts. Hackers generally do want fame, but more for disrupting corporate sites, or going against a (usually) right wing cause. They are the modern form of freedom fighters in many cases, some do hack for profit, but most do it for pride. Most hackers tend to be highly intelligent and underutilised - if I could hire some hackers, I would.

That is one of the main reasons, if your website is hacked, it will probably make it stronger in the long run.

 

Why Websites Get Hacked

There are a few good reasons, and bad ones, why websites get hacked. 99% of the time, it will be totally recoverable if you are using Smith and Wises recommended suppliers, so don't get too anxious! Some common reasons include:

• Poor host / server security (Smith and Wise hosts don't have this problem).

• Poor directory / file permission settings (our newer CMS's protect against this).

• High profile - good for political statements - wide audience or high profile audience.

• Worldwide script exploits (rare, but normally repairable within 24 hours).

• Poor password protection / revealing details to fake / masked third parties.

• Taking in financial / personal details without proper encryption (makes a website an easy target).

• Being a high value domain / website - to attempt to domain squat or damage content.

If (When) The Worst Happens

If you are a large corporation, or a government body, you should already have a plan in place if your website goes down (Smith and Wise clients can review this plan in their Client CP on our site). It is inevitable some websites will get hacked, and some will get repeatedly hacked, no matter what you do. The important thing is to plan.

Things to consider:

• Who will you contact if your website gets hacked (see your Client CP if you work with Smith and Wise).

• Understand your website might be down for a day or two, there is no quick fix.

• If you have a financial / e-commerce website, you will need to contact

  • 1). Customers Affected, 

  • 2). Your Hosting Company, *** Contact Your Hosting Company BEFORE Your Developer ***

  • 3). Your Merchant Account Services Provider,

  • 4). The holder of your SSL, to claim compensation if relevant.

  • 5). Contact your website developer, email Smith and Wise and we will contact you.

• As soon as everything is back in order, get a full evaluation from your hosting company, and developer.
  

---

-