Modwest Blog

Modwest Loves Linux

I was just reading a cool article about fifty places Linux is running that you might not expect (like the national government of Spain and the U.S. Department of Defense), and it occurred to me that, hey, we could be on the list too.

At Modwest:

• 99% of our servers run Linux (including a Debian Linux mirror)

• 50% of our primary workstations run Linux (25% Mac, 25% Windows)

Personally, I've tried to switch from Windows to Linux on my primary desktop several times over the last ten years, and each time there was just too much tweaking and manual workarounds required for me.

Last year, with the release of Ubuntu 9, my experience was much improved and I think I've switched for good.

If you don't want to commit to switching but are curious and need to keep Windows around, there are several options, including:

• Wubi, a Windows installer for Ubuntu Linux that lets you try out Linux with one click.
• Virtualbox OSE, which allows you to run Windows inside your Linux operating system.
• Debian Live CD, which allows you to boot into Debian Linux without actually installing it, just to check it out
• Fedora Live CD, same idea, different flavor of Linux

-JM

Ten Resources for Keeping Your Site Secure

With the rise of software like WordPress, Joomla, and Interspire's products, now almost anyone can deploy a full featured website in just a few minutes. Some of the most popular ones have also fostered a rich ecosystem of extensions and themes to further customize these already powerful packages.

Since no software is perfect, the bad guys know that probing websites for vulnerabilities occasionally finds an unintentional back door into the program. Exploiting these vulnerabilities can empower them to send spam, surreptitiously link to their own (usually shady) sites, or worse.

Luckily, these vulnerabilities are usually discovered quickly and reported to the software vendor/developer who produced the package, and a security update or patch is released relatively quickly.

The trick is that you, the site owner, need to be made aware of the update's availability.

WordPress, for one, makes this pretty easy: upon logging into the administrative interface, you're immediately presented with the option to upgrade if a newer version is available. (And don't forget installing WordPress is a snap at Modwest as well.)

Other packages may not have such a feature, and so it's wise for site owners to subscribe to the email list, RSS feed, or forum in which important announcements about your software are released.

Unfortunately it's not feasible for any hosting company to stay abreast of every security update associated with every web software package out there. So, it's important for site owners to stay abreast of the latest updates. Here's a few links associated with some of the most popular webware out there, where you can stay informed:

• WordPress current events
• Joomla's Vulnerable Extensions List and Security Forum
• Drupal's Announcement Forum and Security Mailing List
• Moveable Type Release Announcements
• Zen Cart Release Announcements
• X-Cart Release Announcements
• phpBB Announcement Forum
• vBulletin Announcement Forum
• Gallery Announcement Mailing List
• Interspire Product Update Forum

Don't see your favorite webware here? Feel free to add a comment!