<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>MSWEB Network Solutions &#187; security</title>
	<atom:link href="http://blog.mswebnetwork.net/tag/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.mswebnetwork.net</link>
	<description>The Official News and Updates Blog of MSWEB Network!</description>
	<lastBuildDate>Tue, 07 Feb 2012 08:14:19 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
		<item>
		<title>WordPress 3.1.3 Update</title>
		<link>http://blog.mswebnetwork.net/544/wordpress-3-1-3-update/</link>
		<comments>http://blog.mswebnetwork.net/544/wordpress-3-1-3-update/#comments</comments>
		<pubDate>Thu, 26 May 2011 12:59:14 +0000</pubDate>
		<dc:creator>marvin.salazar</dc:creator>
				<category><![CDATA[Announcement]]></category>
		<category><![CDATA[Security Tips]]></category>
		<category><![CDATA[Web Hosting]]></category>
		<category><![CDATA[WordPress]]></category>
		<category><![CDATA[clickjacking]]></category>
		<category><![CDATA[Fix]]></category>
		<category><![CDATA[hardening]]></category>
		<category><![CDATA[issues]]></category>
		<category><![CDATA[Philippine Hosting]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[update]]></category>
		<category><![CDATA[wordpress]]></category>
		<category><![CDATA[wp]]></category>

		<guid isPermaLink="false">http://blog.mswebnetwork.net/?p=544</guid>
		<description><![CDATA[WordPress.org announced version 3.1.3 now available for download or automatic installation.]]></description>
			<content:encoded><![CDATA[<p>WordPress.org announced a new update available.</p>
<p>Download WordPress 3.1.3 or update automatically from the Dashboard → Updates menu in your site’s admin area.</p>
<p>This is a security update for all previous versions. It contains the following security fixes and enhancements:</p>
<div>
<ul>
<li>Various security hardening by Alexander Concha.</li>
<li>Taxonomy query hardening by John Lamansky.</li>
<li>Prevent sniffing out user names of non-authors by using canonical redirects. Props Verónica Valeros.</li>
<li>Media security fixes by Richard Lundeen of Microsoft, Jesse Ou of Microsoft, and Microsoft Vulnerability Research.</li>
<li>Improves file upload security on hosts with dangerous security settings.</li>
<li>Cleans up old WordPress import files if the import does not finish.</li>
<li>Introduce “clickjacking” protection in modern browsers on admin and login pages.</li>
</ul>
<p>For more info please visit the WordPress <a href="http://core.trac.wordpress.org/log/branches/3.1/?action=stop_on_copy&amp;mode=stop_on_copy&amp;rev=18023&amp;stop_rev=17805&amp;limit=100">change log</a></p>
<p>For all MSWEB Network Client&#8217;s if you do not know how to update your WordPress powered websites. Send us a ticket at support@mswebnetwork.net so we can update your WP installation for free!</p>
<p>The Philippines Best Web Hosting Provider, MSWEB Network Solutions shares awareness and security to all our friends and business partners and to all netizens to promote better and safer internet use.</p>
<p>Send in your comments and share your insights and thoughts about this new WordPress update. Visit us at <a title="www.mswebnetwork.net" href="http://www.mswebnetwork.net/">www.mswebnetwork.net</a></p>
</div>
]]></content:encoded>
			<wfw:commentRss>http://blog.mswebnetwork.net/544/wordpress-3-1-3-update/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Security Alert for WordPress Users</title>
		<link>http://blog.mswebnetwork.net/409/security-alert-for-wordpress-users/</link>
		<comments>http://blog.mswebnetwork.net/409/security-alert-for-wordpress-users/#comments</comments>
		<pubDate>Mon, 04 Apr 2011 08:20:59 +0000</pubDate>
		<dc:creator>marleo.salazar</dc:creator>
				<category><![CDATA[Announcement]]></category>
		<category><![CDATA[Security Tips]]></category>
		<category><![CDATA[Vulnerability]]></category>
		<category><![CDATA[WordPress]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Security Alert]]></category>
		<category><![CDATA[update]]></category>
		<category><![CDATA[upgrade]]></category>
		<category><![CDATA[vulnerability]]></category>
		<category><![CDATA[wordpress]]></category>

		<guid isPermaLink="false">http://blog.mswebnetwork.net/?p=409</guid>
		<description><![CDATA[<p>Dear Valued Clients,</p> <p>We have received a number of hacking incidents for the past few days. We have investigated the matter and found out that unwanted plugins on a WordPress installation caused the incident. We have instructed also our server administrator to tighten the security measures on all servers.</p> <p>If you’re using WordPress for your [...]]]></description>
			<content:encoded><![CDATA[<p><span style="font-size: small">Dear Valued Clients,</p>
<p>We have received a number of hacking incidents for the past few days. We  have investigated the matter and found out that unwanted plugins on a  WordPress installation caused the incident. We have instructed also our  server administrator to tighten the security measures on all servers.</p>
<p>If you’re using WordPress for your website, kindly remove/delete any  unwanted plugins on your WP installation. We also suggest that make it a  regular habit of checking if you’re using the latest and stable release  of WordPress or any 3rd party script you are using for your website. If  you’re not, please make the necessary update. If you’re not sure how  this is done, please let us know and we will do it for you at no extra  cost.</p>
<p>http://codex.wordpress.org/Updating_WordPress</p>
<p>Another good thing to do is to secure your username and password for your WordPress installation.</p>
<p>http://www.webreference.com/authoring/10-wordpress-security-tips/</p>
<p>Hope that the following information that we have provided you above will help you.</p>
<p>Please do let us know if you require further assistance.</p>
<p>Thanks and more power!</span></p>
<p><span style="font-size: small">Sincerely,<br />
<strong>MSWEB/8finity Management</strong></span></p>
]]></content:encoded>
			<wfw:commentRss>http://blog.mswebnetwork.net/409/security-alert-for-wordpress-users/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Adobe Flash Player Denial of Service Vulnerability</title>
		<link>http://blog.mswebnetwork.net/195/adobe-flash-player-denial-of-service-vulnerability/</link>
		<comments>http://blog.mswebnetwork.net/195/adobe-flash-player-denial-of-service-vulnerability/#comments</comments>
		<pubDate>Tue, 16 Nov 2010 12:02:08 +0000</pubDate>
		<dc:creator>marvin.salazar</dc:creator>
				<category><![CDATA[Announcement]]></category>
		<category><![CDATA[Security Tips]]></category>
		<category><![CDATA[Vulnerability]]></category>
		<category><![CDATA[Adobe Flash Player]]></category>
		<category><![CDATA[denial os service]]></category>
		<category><![CDATA[flaw]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://blog.mswebnetwork.net/?p=195</guid>
		<description><![CDATA[<p>Adobe Flash Player Denial of Service Vulnerability<br /> November 15, 2010</p> <p>Adobe Flash Player is web standard for multimedia player. A denial of service vulnerability is present in some versions of Adobe Flash Player. A flaw is present in the input validation condition and affects Windows, Mac OS X, Linux, Solaris, as well as Android [...]]]></description>
			<content:encoded><![CDATA[<p>Adobe Flash Player Denial of Service Vulnerability<br />
November 15, 2010</p>
<p>Adobe Flash Player is web standard for multimedia player. A denial of service vulnerability is present in some versions of Adobe Flash Player. A flaw is present in the input validation condition and affects Windows, Mac OS X, Linux, Solaris, as well as Android clients. Successful exploitation could allow an attacker to cause affected systems to crash. Exploitation requires an attacker to convince a user to visit a malicious web page.</p>
<p>Source from <a href="http://mcafee.com" target="_blank">McAfee</a> Threat Feed</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.mswebnetwork.net/195/adobe-flash-player-denial-of-service-vulnerability/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Keep all your password in a safe box!</title>
		<link>http://blog.mswebnetwork.net/79/keep-all-your-password-in-a-safe-box/</link>
		<comments>http://blog.mswebnetwork.net/79/keep-all-your-password-in-a-safe-box/#comments</comments>
		<pubDate>Fri, 05 Mar 2010 11:14:31 +0000</pubDate>
		<dc:creator>marleo.salazar</dc:creator>
				<category><![CDATA[Security Tips]]></category>
		<category><![CDATA[Tips and Tricks]]></category>
		<category><![CDATA[box]]></category>
		<category><![CDATA[password manager]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[vault]]></category>

		<guid isPermaLink="false">http://blog.mswebnetwork.net/?p=79</guid>
		<description><![CDATA[<p>One password to rule them all! Har har har! Well that is  really convenient in keeping tabs on all my social networking sites as well as  my emails or my hosting account! Worked so far... but until when?</p>]]></description>
			<content:encoded><![CDATA[<p>One password to rule them all! Har har har! Well that is  really convenient in keeping tabs on all my social networking sites as well as  my emails or my hosting account! Worked so far&#8230; but until when?</p>
<p><span id="more-79"></span></p>
<p>Most of us uses one password. We may even have a full dozens  of other variations of our nickname, our loved ones our favorite pet, etc, etc.  These are still basic passwords dude! You uses that on your facebook,  friendster, your gmail etc. Now would you think that is nice?</p>
<p>You thought to yourself, no big deal in that&#8230; Heck yah,  using the same password for my facebook or my friendster would not hurt at all.  Well think again! What happens if someone was able to access your facebook  account and got all your contacts? What if that person traces your browsing  history and found out you added farm coins and cash to your farmville account  using your paypall or credit card? Not that it’s just $5 for 25 farm cash but  would you like someone to see your transaction?</p>
<p>We normally take for granted the that, when we are using our  username, email address and we are using the same passwords on dozens of sites  we are relying on the encryption that site is offering. In Your master key is  copied on every site you uses and that we are trusting them to keep their site  secure and that our sensitive information will not be compromised? Big deal ‘ey?</p>
<p>How about this, one guy posted his email on a forum. Then this  bad guy saw his email address then tries a couple of password combination, or  then uses dictionary attack to crack the email?. After a few  mins or hours, presto! Read a couple of email in your inbox and found out that  you have a paypal account. Tries your email password for your paypal account,  you unforunate soul uses the same password as your unified master key to all  your accounts!</p>
<p>Dude have a strong and diverse password everytime is now necessary!   It is as a necessity as your antivirus  having spyware protection as well as malware dection capability! If you don’t  practise strong and diversified password combination that is different on every  site or application you use, then you should not complain if you get  compromised because of your negligence. Plain and simple! Dude it’s your fault!</p>
<p>So I, like many of you pinoys out there who have short-term  memory like Dory who inheritted the symptom from their father side (or is it  mother side?) use a password box to store all your keys. There are hundreds out  there, be it free or commercial, its a must to use one! Here’s the one I use  for my home pc: <a href="http://www.keepassx.org">www.keepassx.org</a> try it don&#8217;t worry it’s free.</p>
<p>But then you say, I want to use the password manager and I  then login to a computer in the corner internet cafe, then someone steals my  password because I didn’t know that it has keylogger installed or tons of  spyware and malware that should not be my fault? Your password manager is  useless. Dude first of all you shouldn’t use any public computers for your  personal transactions. It is a mortal sin to use public computer on your bank  transactions! Don’t even think about it! Second most of this password manager,  vault, keeper, etc has those little things called master password. So if your  precious mac or dell laptop got stolen you should feel safe as long as you have  backup of course.  Lastly if your computer has rootkit and is zombie that is being controlled by  another user and they snatched the form you completed, well your as good as dead  anyway and you learned your lesson for not running a good and reliable  AntiVirus protection.</p>
<p>Now we have learned to make good practise of strong  password, good and reliable antivirus as a mandatory protection for our sensitive  data and as well as our online fate. Now let us download a password manager of  our liking and atleast keep our sensitive data safe, or alteast minimize the  impact of the damage in the tide of a security breach.</p>
<p>This security tip is provided for you by The Philippines  Best Web Hosting Provider www.mswebnetwork!</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.mswebnetwork.net/79/keep-all-your-password-in-a-safe-box/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

