Comodo, the Certification Authority behind InstantSSL, is the fastest growing SSL Provider in the world. Unlike other Certification Authorities, Comodo does not just provide SSL Certificates - they are a world-renowned security and cryptography service provider. When you are a customer of Comodo, you can feel safe knowing that your website security is provided by experts.

Instant SSL Certificates are the most cost-effective fully validated and fully supported 256bit SSL Certificatesyou can buy today.You can also feel safe in the knowledge that Comodo will validate your application in accordance with the latest digital signature legislation pertaining to Qualified Certificates. This validation is done effectively and quickly, ensuring you need not wait the traditional 3 working days normally associated with a fully validated SSL Certificate.

InstantSSL boasts industry leading browser ubiquity - comparable to Verisign and Thawte, however without the costs associated with other SSL Providers. Instant SSL Certificates are compatible with over 99% of browsers - including Internet Explorer, Firefox, Google Chrome, and Safari.

InstantSSL benefits summary:

InstantSSL Certificates are the most cost effective SSL Certificates you can buy which include:

Full validation conducted quickly - in many cases you can expect your SSL Certificate to be issued within minutes

Over 99% browser compatibility

256 bit strong encryption security

Backed by warranties ranging from $10,000 to $250,000

Bing and other non-Google search engines gained a good size market share now. The search volume is lower but Bing now teamed up with Yahoo and there is a chance for small businesses to reach internet users faster than facing huge competition on Google.

Over the past months or so, we have been able to analyze Bing and how their ranking system ranked websites.

 How to Optimize for Bing:

 1. Webmaster Center: Register a Bing webmaster Center account and add your website to the Bing Index Crawler which then the crawler will access your website meta text.

Once successful submission is complete on the Dashboard you will be able to see summary analysis, Profile, Crawl Issues, Backlinks, Outbound Links, Keywords and Site Map.

 While accessing Webmaster Center use Internet Explorar 6.0 or higher or Mozilla Firefox as current version doesn’t support Google Chrome browser.

 2. Local Listing Center:  Very important to Submit your site, however they do a unusual way of verification by sending a postage mail as they don’t support email or telephone verification, results you might have to wait few days more extra! this may be to business confidentiality and authenticity!

 3. Domain Age: Like Google the domain age is another preference by Bing however they don’t  completely ignore a newer domain but generally rankings are low.

 4. Title Tags:  Bing indexing technique includes title tags checking which supports their information retrieval and document index model. Bing preferred title with relevant keyword that match with site contents.

 5. Content: Bing prefer pages with more than 300 words and words are related with title and information text are not irrelevant!

 6. Flash: Good News. Unlike Google –Bing is more Flash friendly –a very good news for Flash developers. However Bing prefers optimized videos with appropriate title tags.

 7. Backlinks:  Bing index management appears they are more focussed on anchor text and content relevancy! The better content higher preference.

 8. Document Preview:  Document preview should be relevant with site content. However Bing doesn’t include image or video on preview indexing.

From our observation Bing loves good content –so better your content higher your chances are.

Sources: 

http://www.google.co.uk/

http://uk.yahoo.com/

http://www.bing.com/?cc=gb

In most recent technology news highlighted many cyber attacks and experts showed their concern about threats.

What is Security Threats and what is the Attacks?

Threat is a potential violation of security which can results compromise of confidential information, invalid authentication, damage the integrity of information and make system unavailable.

Threat can caused by many facts but mainly can caused by

•       System design flaw.
•       Improper implementation of system.
•       Active Operation.

Now When a threat can be an Attack?

An attack is any action that violates security such as an active adversary that includes physical theft or unathorised access by breaking into system to access data and output or simply an action to make system unstable & unavailable such as DOS (Denial of Service) Attack.

DOS attack is a common type of sophisticated attack recently received huge media attention! After a hacking group made Paypal, Mastercard etc unavailable!

But- What is DDOS Attack? How does it work?

There are many kinds of DOS attack but most popular one is “Ping of Death”. The Ping of Death is a large ICMP packet sent by a workstation to a target. The target receives the ping in fragments and starts reassembling the packet, which is a normal routine operation by any server . By default they are programmed to perform reassembling data packet when they receive!

When they receive data packet they store that on buffer or memory and then they reassembled!  If server receive too many data packet or too large packet larger than its buffer or memory then it can causes unpredictable results such as reboots or system hangs !

Imagine a large system like Mastercard or Paypal webserver unavailable for 1 hour can cost millions.

Sources: 

http://www.google.co.uk/

http://uk.yahoo.com/

http://www.bing.com/?cc=gb

www.bing.com 

Information Security Basics:

Information security is a business requirements and in some business it is an ethical and legal requirements. 

Information Security is a state of well-being of information and infrastructures in which the possibility of successful yet undetected theft, tampering, and disruption of information and services is kept low or tolerable.

There are few fundamental basis of security are: 

Confidentiality is the concealment of information or resources; in simple confidential information or information resource should remain confidential.

Authenticity Security system should provide an identification process and provide assurance that the origin of information is valid and authentic.

Integrity refers to the trustworthiness of data or resources in terms of preventing improper and unauthorized changes.

Availability refers to the ability to use the information or resource desired. 

But some of the most secure system is not usable at all ! and the most usable system is very unsafe. There always should be a balance between usability and security system.

Sources: 

http://www.google.co.uk/

http://uk.yahoo.com/

http://www.bing.com/?cc=gb

Sources: 

http://www.google.co.uk/

http://uk.yahoo.com/

http://www.bing.com/?cc=gb

Ten Linux Commands Every Web Developer Should Know

In the early days of the Web, you could build an appealing portfolio with little more than a basic understanding of HTML and a server-side scripting language such as PHP. Although these days the learning curve for developing websites remains remarkably shallow, the industry's growing complexity requires today's professional developer to embrace a variety of technologies. For many developers, this shift hasn't come willfully; in fact, many developers still choose to limit their interaction with the Web server to uploading files via an FTP client. This approach leaves developers unable to manage website assets effectively, monitor server performance, and easily carry out other tasks that are otherwise time-consuming and tedious.

In this article, I'll introduce you to 10 indispensable Linux commands that can make your web development work much easier and even more enjoyable. Whether you prefer to limit your Linux exposure to the occasional SSH session, or have recently switched your desktop operating system to a Linux distribution such as Ubuntu, these 10 commands will hopefully prompt you to begin making your own investigations into the power of the Linux command-line.

Disclaimer for the purists: I refer to "Linux commands" throughout this article merely as a convenience due to the public's widespread general familiarity with the Linux operating system as compared to other variants such as FreeBSD. Of course, these commands will work on a wide variety of operating systems.

1. Retrieving a Software Package

If you need to install some software by retrieving the source package, you can save a step from the process of downloading the package to your laptop and then transferring the file anew via FTP client. Instead, just retrieve the package directly from your web server using the wget command. For instance, to retrieve the latest version of the Zend Framework you can just copy the download link directly from the Zend Framework website and then pass it to the wget command like this:

2. Monitoring Server Processes

These days a typical website is powered by much more than just a few HTML pages, often relying on various regularly executing server-side scripts to carry out a variety of maintenance-related tasks. You can keep tabs on your server's executing processes using the top command. This command provides you with a real-time overview of the server's processor activity and memory consumption, listing all processes, the process owner, percentage of CPU used, and duration of execution.

To execute top, just run the command from the command line without any accompanying options (although other options are supported). For instance, the following output was produced after executing the top command on my Ubuntu laptop:

3. Reviewing Log Files

You'll often need to review your server's log files to monitor and resolve any unexpected errors and other issues. Of course, these log files have a tendency to grow as rapidly as your traffic volume. Many novice Linux users will be familiar with the DOS more command, which they use to page through even large log files. Linux offers a far more efficient method for reviewing files, particularly the "end" of files: using the tailcommand. For instance, to display the last 10 lines of a file just pass the file to the tail command:

You can use the -n switch to specify a larger number of lines, additionally using the more command to view the output one screen at a time:

To interactively output the newly appended lines as they appear in the file, you can use the -f switch, which will refresh the output every few seconds:

4. Copying Files with scp

An FTP client such as FileZilla works well for transferring files between a developer's laptop and web server, but what about when you need to transfer a file while in the midst of an SSH session? Rather than go through the hassle of logging into the server anew using an FTP client, consider using the scp (secure copy) command. I demonstrated this command in the WDVL.com article "Manage Your Server Accounts Securely with Key-based Authentication," using it to copy my public key to the web server:

In this example, I copy the file id_rsa.pub to the web server identified by the IP address 192.168.1.103 using the server account webuser, and placing the file in the directory /home/webuser/.ssh/.

5. Finding World-writable Files

For security reasons you should always ensure that your website's public-facing files are not world-writable. Otherwise, you could leave your server vulnerable to defacement by an outside party. Hopefully, you configure your file ownership and permissions to disallow such a gaffe from the outset, but it doesn't hurt to regularly audit your server to confirm no such security holes exist. Rather than exhaustively browse the server documents directory, you can instead use the find command to scan a specific directory structure for files configured with certain permissions:

In this example, I tell find that I'm looking for files (by setting the -type option to f). You can alternatively search for directories by setting -type to d. Finally, I use the -exec option in order to format any found files using the ls command.

6. Backing Up Your Web Directory

Your web hosting provider presumably has implemented a fairly routine backup service. However, I nonetheless encourage you institute your own backup procedure in order to be absolutely certain you'll be able to easily restore your site in the event of a catastrophic server failure. Quite a few solutions exist for backing up your data, among them Amanda, but you can create your own home-brewed solution using the tarcommand. For instance, to back up the web directory located at /var/www/www.wjgilmore.com while preserving file permissions and excluding the directory /var/www/www.wjgilmore.com/cache/ (as it contains cached files, which are not important for backup purposes), use the following command:

To restore the directory structure, you again use tar, but this time passing the x switch:

Using tar in conjunction with scp and key-based authentication, you could completely automate the backup process and move the tar file to a remote server!

7. Viewing Your Command History

When getting acquainted with Linux's occasionally esoteric syntax, you'll regularly attempt to recall a particular syntax you executed while attempting to debug a server problem. Rather than continuously referring to bookmarks or other learning resources to recreate the command, you could review your command history using the history command. Executing history will produce a list of the commands you executed. A sample of the output looks like this:

Because each command is accompanied by its sequence number, you can easily execute it anew simply by prefacing the sequence number with an exclamation mark, like this:

8. Creating Directory Trees

You'll often need to create a series of nested directories, particularly when starting new projects. Most novice users tediously create each directory by using the mkdir command and then enter each newly created directory only to create the next. You can perform this task in mere seconds using the -p option. For instance, the following example will create a new project directory named webapp, a directory namedapplication inside it, and a directory named controllers inside application:

9. Creating Command Aliases

For whatever reason, I almost always prefer to list directory contents using a format that displays the permissions, owner and group names, size, modification date, and name, by passing the -al option to the ls command:

Because I use this command so frequently, I've aliased it to something easier to type, namely dir, using the alias command:

These aliases, however, are lost when you logout of the current session. To make them permanent, you can add them to an account configuration file such as .bashrc.

10. Managing Source Code with git (or svn, or bzr...)

This concluding section isn't so much about a particular command, but rather about one of several possible commands, which perhaps more than any other introduced here you should be well acquainted with if you're not already. The git, svn and bzr commands refer to the command-line interfaces used by the Git, Subversion, and Bazaar version control solutions, respectively. Version control is an essential tool no matter the web project's size and scope, and you're doing both yourself and your clients a significant disservice if you don't rigorously manage projects using one of these powerful solutions.

Even if you don't believe that maintaining a well-documented history of your project's lifecycle is worth the effort, the benefits of version control solutions stretch far beyond mere project management. For instance, you can use basic Git commands to easily deploy and update your website code directly from your development laptop. Although numerous approaches exist, one of the easiest ways is to clone the repository containing your site code to the live server. For instance, if you were using GitHub to host your website repository (call the repositorywjgilmore), you could use the following command to retrieve the latest version of your repository:

You can find more sophisticated deployment solutions such as Capistrano, which is regularly used to deploy both Rails and PHP projects.

Conclusion

Linux's command-line capabilities are so vast that this article easily could have covered 1,000 commands rather than a mere 10. Nonetheless, it hopefully was enough to whet your appetite for the incredible power that even occasional users can wield!

Sources: 

http://www.google.co.uk/

http://uk.yahoo.com/

http://www.bing.com/?cc=gb

Sources: 

http://www.google.co.uk/

http://uk.yahoo.com/

http://www.bing.com/?cc=gb

RSA: 'Security technology needs to be more risk-based'

Source: