Is your web developer putting your company at risk?

By

Freelance workers have proven to be an extremely useful resource for many small companies in recent years, allowing for specialised expertise to be recruited when needed the most.

 However a new research report from security firm Tripwire has found that using such workers, particularly for IT projects, might actually be putting your business in danger of a major security breach.

 The company set up an experiment which recruited 25 freelancers to create a site for a staged project.

 Each developer received the same email with the exact same criteria, with 10 contractors eventually chosen to create a finished project - however when investigated by the Tripwire Vulnerability and Exposure Research Team (VERT), every single website was plagued with critical security failures.

 This included the shocking finding that every website failed to protect any documents from unauthorised users, and that none of the websites effectively prevented hackers from uploading a backdoor, which would provide them complete control over the website’s content and data.

 “It came as no surprise to find that every single website was plagued with critical security failures,” said Craig Young, principal security researcher at Tripwire. 

 “The process was riddled with communication issues and questionable practices from beginning to end.”

 “If this were a real business project, it would have run over budget, past the deadline and have been very difficult to manage. On top of all that, the customer would have been left with an insecure website,”

 Young added. “We cannot reasonably expect data breaches to decrease if websites built by developers are not made with basic security measures built in.”

 In order to not fall victim to the same flaws, Tripwire is advising companies looking for a new website or other related projects to be more thorough in the recruitment process, especially when looking at contractors from other time zones.

 The firm also recommends scanning all finished projects with a web application vulnerability scanner at the very least, and ideally also look to get evaluation by a professional penetration tester before final payment is made.

 Source: itproportal
Location: United States

Comments

Post a Comment

Popular posts from this blog

How to Install Facebook Lite and Messenger Lite on Android in Any Country

By
Image
The standard Facebook app for Android—how can I put this delicately?—sucks. Not only is it probably draining more battery from your phone than most of your other apps, Facebook has gutted the messenger functionality from it in order to push a separate app and platform. There are alternatives to the official app, but most of them can’t also send user-to-user messages. Luckily, there’s an official solution that’s both efficient and effective: the Facebook Lite app. What Is Facebook Lite? Facebook created the Lite version of its Android app specifically for developing countries and other places where robust mobile Internet isn’t always available. It’s designed to offer access to all the basic functions of the site, including person-to-person messages, while using the smallest amount of bandwidth possible. The app is also designed to target low-cost phones themselves. To this end, it’s much smaller and less complex than the full Facebook app: while the standard Facebook appl...
Read more

Can You Still Make a Living in Photography in 2018?

By
Image
Last week, I had a photographer friend (hobbyist, but very talented) ask me if it was still possible to make a living in photography. This coincided with a Facebook rant from a local pro about a small restaurant asking for free food photography in exchange for the dreaded “exposure.” There are really two questions here, but I think they tie in together nicely.  The question, I feel, is this: if people are asking for free/cheap work and photographers are willing to work for free/cheap, is photography still a viable business? This is an issue that’s discussed a lot online: complaints of a price race to the bottom, photographers with poor gear, photographers lacking skill, photographers working for free or charging expenses. In the UK, you can find event photographers working for as little as £50 a night, weddings being shot for £300, and portrait sittings for £30. At the same time, in my local area (Leicester, UK), there are wedding photographers booked out all yea...
Read more