Both sides previous revision
Previous revision
Next revision
|
Previous revision
Next revision
Both sides next revision
|
why-moodlearning-hosted-site [2019/04/12 08:22] serbizadmin |
why-moodlearning-hosted-site [2021/11/29 15:13] serbizadmin |
====== Why moodLearning-hosted Site? ====== | ====== Why moodLearning-hosted Site? ====== |
{{ ::why_ml_site.png?600 |}} | |
| {{ :why_ml_site.png?600 }} |
| |
| ===== Optimization ===== |
| |
| A moodLearning-powered site comes with free consulting on optimization, making sure that you have access to the right tools to make your site most accessible to your audience. |
| |
===== Security ===== | ===== Security ===== |
~~NOTOC~~ | |
At moodLearning we take security seriously. If you don't take it as seriously as we do, | ~~NOTOC~~ At moodLearning we take security seriously. While there can be no 100% guarantees of online security for a long time, we want to do our homework. If you don't take it as seriously as we do, |
| |
* your site could be an unwitting accessory to crimes. See this example of the search engine results for a compromised site with nefarious contents uploaded by a "hacker": \\ \\ | * your site could be an unwitting accessory to crimes. See this example of the search engine results for a compromised site with nefarious contents uploaded by a "hacker": \\ |
{{ ::googleresultsofhackedsite.png?400 |}} | |
\\ | {{ :googleresultsofhackedsite.png?400 }} \\ \\ In the case of an organization whose site was recently compromised, we had to help rehabilitate their online reputation. moodLearning caused the removal of over a thousand pages of shady pages on gambling, antivirus, thesis and dissertation writing, mail-order brides, data rooms, viagra. \\ \\ On your end, you may not even notice the "hacking" if you don't pay close attention to it. On your dashboard, the pages have been published by "you": \\ \\ {{ :dashboardarticles.png?400 }} |
\\ | |
In the case of an organization whose site was recently compromised, we had to help rehabilitate their online reputation. moodLearning caused the removal of over a thousand pages of shady pages on gambling, antivirus, thesis and dissertation writing, mail-order brides, data rooms, viagra. | |
\\ | |
\\ | |
On your end, you may not even notice the "hacking" if you don't pay close attention to it. On your dashboard, the pages have been published by "you": \\ \\ | |
{{ ::dashboardarticles.png?400 |}} | |
\\ | |
* your site could be open for exploitation. This is a sample scanning result from an actual insecure site: | * your site could be open for exploitation. This is a sample scanning result from an actual insecure site: |
<code> | ''PORT STATE SERVICE VERSION 21/tcp open ftp Pure-FTPd 22/tcp filtered ssh 26/tcp open smtp Exim smtpd 4.91 53/tcp open domain ISC BIND 9.8.2rc1 (RedHat Enterprise Linux 6) 80/tcp open http nginx 1.14.1 110/tcp open pop3 Dovecot pop3d 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 143/tcp open imap Dovecot imapd 443/tcp open ssl/http nginx 1.14.1 445/tcp filtered microsoft-ds 465/tcp open ssl/smtp Exim smtpd 4.91 587/tcp open smtp Exim smtpd 4.91 993/tcp open ssl/imap Dovecot imapd 995/tcp open ssl/pop3 Dovecot pop3d 2222/tcp open ssh OpenSSH 5.3 (protocol 2.0) 3306/tcp open mysql MySQL 5.6.41-84.1 8080/tcp open http nginx 1.14.1 8443/tcp open ssl/http nginx 1.14.1 Service Info: Host: ; OS: Linux; CPE: cpe:/o:redhat:enterprise_linux:6 '' |
PORT STATE SERVICE VERSION | |
21/tcp open ftp Pure-FTPd | A number of ports here are open unnecessarily. For instance, Port 3306 is the open database port that can theoretically be exploited to inject unwanted contents to the site or, worse, the database can be erased altogether. \\ |
22/tcp filtered ssh | |
26/tcp open smtp Exim smtpd 4.91 | |
53/tcp open domain ISC BIND 9.8.2rc1 (RedHat Enterprise Linux 6) | |
80/tcp open http nginx 1.14.1 | |
110/tcp open pop3 Dovecot pop3d | |
135/tcp filtered msrpc | |
139/tcp filtered netbios-ssn | |
143/tcp open imap Dovecot imapd | |
443/tcp open ssl/http nginx 1.14.1 | |
445/tcp filtered microsoft-ds | |
465/tcp open ssl/smtp Exim smtpd 4.91 | |
587/tcp open smtp Exim smtpd 4.91 | |
993/tcp open ssl/imap Dovecot imapd | |
995/tcp open ssl/pop3 Dovecot pop3d | |
2222/tcp open ssh OpenSSH 5.3 (protocol 2.0) | |
3306/tcp open mysql MySQL 5.6.41-84.1 | |
8080/tcp open http nginx 1.14.1 | |
8443/tcp open ssl/http nginx 1.14.1 | |
Service Info: Host: <redacted info>; OS: Linux; CPE: cpe:/o:redhat:enterprise_linux:6 | |
</code> | |
A number of ports here are open unnecessarily. For instance, Port 3306 is the open database port that can theoretically be exploited to inject unwanted contents to the site or, worse, the database can be erased altogether. | |
\\ | |
\\ | |
* Left unattended or just poorly maintained, your site could be vulnerable to various harms. Here's a vulnerability scan result on our client's site before we apply the risk treatment sought: | * Left unattended or just poorly maintained, your site could be vulnerable to various harms. Here's a vulnerability scan result on our client's site before we apply the risk treatment sought: |
\\ | |
{{ ::vulnerabilityscan.png?400 |}} | \\ {{ :vulnerabilityscan.png?400 }} \\ Clearly this site has not been updated in a long time. moodLearning's support comes with periodic vulnerability assessments to address risks proactively. \\ |
\\ | |
Clearly this site has not been updated in a long time. moodLearning's support comes with periodic vulnerability assessments to address risks proactively. | |
\\ | |
\\ | |
| |
==== See Also ==== | ==== See Also ==== |
* [[LMS Security]] | |
* [[Security Tools]] | * [[LMS Security|]] |
\\ | * [[Security Tools|]] |
\\ | |
| \\ |
---- | ---- |
| |
===== Proactive Support ===== | ===== Proactive Support ===== |
While security is a major consideration at moodLearning, we know there's no such thing as perfect security. At times security is balanced with usability. The more features you offer or the fancier your site is, its security vulnerability tends to increase. That's why we at moodLearning complements security with **proactive support** to address constant threats to our partners' online assets. | |
\\ | |
\\ | |
| |
| While security is a major consideration at moodLearning, we know there's no such thing as perfect security. At times security is balanced with usability. The more features you offer or the fancier your site is, its security vulnerability tends to increase. That's why we at moodLearning complements security with **proactive support** to address constant threats to our partners' online assets. |