Advertisement

add
Showing posts with label Hosings and Servers. Show all posts
Showing posts with label Hosings and Servers. Show all posts

Wednesday, 12 November 2014

Certificate Error

This type of error can be identified by an error message that tells an user that there is a problem with the websites security. It occurs when there a problem arises with a certificate or web servers use of the certificate. A certified site allows the Internet browser to establish a secure connection with the site. Internet explorer helps in keeping the users information secure.

The following error messages are displayed :


1. This websites security certificate has been revoked:
This indicates that the security certificate obtained by the website is fraud and should not be trusted.

2. This websites address does not match the address in the security certificate:
This indicates that a website is using the certificate issued to a different web address.

3. This websites security certificate is out of date:
This indicates that the current date is not updated i.e., either it is before or after the time period for which the certificate remained valid. Outdated certificates can pose a security risk and hence, needs to be renewed.

4. This websites security certificate isnt from a trusted source:
This indicates that a certificate has been issued by a certifying authority which is not recognized by the Internet browser.

5. Internet Explorer has found a problem with this websites security certificate:
This indicates that Internet explorer incurred a problem with a certificate that does not match any other error. This may happen due to damage of the certificate.

Though it is not very harmful, yet it is recommended not to ignore a certificate error. A websites certificate addresses the identification of the web server. An error in a certificate indicates that the connection has been intercepted or there is mis-representation of the identity of the web server. If an user ignores the warning and go to the site presenting a certificate error, the Internet browser will remember the certificate while he/ she has his/ her browser open. A certificate error cannot be turned off. Receiving a certificate error indicates that website being visited is having certificate problem, and there is no problem with the Internet browser. If one comes across a certificate error at any website visited before, it might be possible that the website is not properly configured. Retyping the address or inserting https in the address bar often takes care of the problem.

Recent Tags : About Certificate Error, Certificate Error Details, What is Certificate Error Knowledge of Certificate Error, Certificate Error

Phishing and Malware Warnings

Phishing is the act of acquiring confidential information like usernames, passwords, account details, credit and debit card details by pretending to be a reliable body in an electronic communication. This is classified as a type of identity theft. Phishing mostly, come as in the form of an e-mail message that tries to entice the recipient to update the sender with their personal information. Phone numbers and e-mail ids to contact with an user are generally taken from popular social and professional networking websites, auction sites, banks, online payment processors etc.  Phishing e-mails often contain links to websites that are infected with malware. Typical phishing is carried out by e-mail spoofing or instant messaging. It directs the users to enter their confidential details at a fake website that actually is nowhere different from a real website in terms of look and feel. The threat of phishing is increasing day-by-day, with larger risks on the social networking sites.

Malware is harmful software that gets installed on the users system without his her knowledge. It is usually used to steal personal information, send junk or spam e-mails. The malware attacks are difficult to detect as mostly this type of infection comes secretly without the computer owners notice.

Protection against phishing and malware is done by checking the sites that a user visits against the list of sites that are reported for this. The lists are automatically downloaded and updated in approximately every half-an-hour thus enabling the phishing and malware protection features.

When a user is downloading an application file, the browser verifies the signature. If it is signed, the browser compares it with the list of known and safe publishers. This check blocks the files if the publisher is unsafe. It also asks Googles Safe Browsing service whether the software is safe by sending some downloads metadata. Phishing and malware protection settings can be found in the security panel. The steps to use it are:

1.Click the menu button and choose option

2. Click on the security panel

·Put check marks against the following:

a. Block reported attack sites

b. Block reported web forgeries

3. Click Ok to save the settings





Recent Tags : About Phishing and Malware Warnings, Phishing and Malware Warnings Details, What is Phishing and Malware Warnings Knowledge of Phishing and Malware Warnings, Phishing and Malware Warnings

Most Prominent SQL Server Problem

The 10 most common issues uncovered by SQL RAPs (in no particular order):

1. Absense of Security Updates

:
This could be the most important and also the most critical situation of sql server when any window security updates were absent on the server and are not be regularly updated. We could find this by asking various queries about servers and different applications and operations.

2. Sql exisitng under any administrative account :


This is a very comman existing issue. The issue arises when any sql running under a type of administrative account which leads to increment in security risk. When the sql server runs under this type of account at this situation the risk on server is increased very much.

3. Enablation of Xp_cmdshell


This is also a very occuring issue when the account is administrative account. In many cases many administrative account holders never realizes that how much its necessary and also its not needed to be turned on evertime continously. They also use this application when needed according to thier requirements.

4. Unscheduled Database integrity checks:


n many cases it has beed seen that the database integrity checks is never enabled. Or not been updated on regular basis. This may leads to database failure due to various database corruption issues. This can be checked by running the BCC CHECKDB application which is in many cases rarely been excuted. This DBCHECK should be done on sql server on regular basis in rder to avoid the database failure.

5.  Absence of sql server updation to the latest service pack:


Next comes the issue of updation of sql server to the latest service pack which is absent in many cases. This updation is important in order to gain the latest security purpose and also to inhance the server performance. There are many cases when there are old service packs are installed on servers.

6. NOLOCK usage :


 In many cases in SQLRAP static analysis of codes of T-SQL stored procedures are also be performed. In which The object that are mainly using the NOLOCK table is been identified. The NOLOCK table hint may cause the inconsistency in code analysis and data reading and also cases various types of errors. This type os service is not available in remote SQL RAP.

7.  Large growing data and file sizes :


This is the issue which mainly accours due to the over growing size of data and files. SQL RAP is a type of service which helps to identify such data growth and helps them to set to a particular value. While transaction of log files this check could also be performed
to determine the actual value of files so that they can be flagged if increased from the threshold limit.

8. Blank easy weak SQL login passwords :


This is one of he most rarely occuring security related issue. This could be checked by using PWDCOMPARE function if the password is weak or blank or if it is same as to the login id. SOme of their also existing which also provides the script due to which any one can able to identify the information about the passwords which is mainly related to the security purpose of servers.

9. Absense of Disaster recovery plan :


This is one of the strongest application which mainly helps to restore the database. One can identify if this application is installed on server or not by doing proper questionaire to  DBA staff. Which could helps to determine wheather its installed on server or not. The conversation may also be takes place between business owners and databae staff.

10.  MSDTC configuration :

This MSDTC may cause the issue related to server performnce and server stability. This issue is very prompltly occuring in which this resource is been created as cluster resource
Recent Tags : About Most Prominent SQL Server Problem, Most Prominent SQL Server Problem Details, What is Most Prominent SQL Server Problem Knowledge of Most Prominent SQL Server Problem, Most Prominent SQL Server Problem