—
Content security policy implementation from generator to production
Why content security policy matters more than you think Content Security Policy (CSP) is one of those security headers that sounds straightforward until you try implementing it on a live…
Continue reading "Content security policy implementation from generator to production"
—
Tech Support: Fixing a compromised WordPress site
Most WordPress compromises stay hidden for weeks. No defaced homepage, no ransom note. More on how to spot a compromised WordPress site Technical support for suspected WordPress hacks Any malicious…
Continue reading "Tech Support: Fixing a compromised WordPress site"
—
How to spot a compromised WordPress site before it's too late
Most WordPress compromises stay hidden for weeks. No defaced homepage, no ransom note. Technical support and fixing a compromised WordPress site Often here's no dramatic defacement, no ransom note, no…
Continue reading "How to spot a compromised WordPress site before it's too late"
—
Modern WordPress security: why management beats manual hardening
Discover why the latest WordPress updates and tools like Wordfence make active management more effective than old-school hardening techniques. A few years ago, I wrote about Hardening WordPress against hacking.…
Continue reading "Modern WordPress security: why management beats manual hardening "
—
Securing your domain: Setting up DNS records for non-sending domains
Every domain owner faces the same fundamental security challenge: ensuring their digital identity remains trustworthy. Even if a domain is used exclusively for hosting websites and never transmits an email;…
Continue reading "Securing your domain: Setting up DNS records for non-sending domains "
—
Building cookieless tracking without Google Analytics
The era of ubiquitous third-party cookies is drawing to a close, accelerated by stringent regulations like the GDPR in Europe and the CCPA in California, alongside browser initiatives such as…
Continue reading "Building cookieless tracking without Google Analytics "
—
General-purpose AI assistants
ChatGPT, Gemini, Claude, Lumo, Grok and Copilot are all general-purpose AI assistants. They are built around markedly different priorities: overall capability, integration with existing platforms, privacy, integration with wider platforms…
—
Simple steps to protect your privacy online
In today’s digital world, protecting your privacy online has become essential. With personal data constantly being shared, stored, and potentially accessed by unauthorised parties, safeguarding your privacy can help you…
Continue reading "Simple steps to protect your privacy online"
—
Simple Analytics: A privacy-focused alternative to Google Analytics
In an era where digital privacy concerns are at the forefront of online discourse, many organisations are reassessing their tools to ensure compliance with data protection laws and maintain user…
Continue reading "Simple Analytics: A privacy-focused alternative to Google Analytics"
—
Web application security testing
With the increasing dependency on web applications in daily operations, securing these applications is paramount to safeguarding data and protecting against breaches. This blog post covers the essentials of Web…
—
Cookieless website tracking and analytics
Cookieless website tracking is a method of collecting analytics data and monitoring website behaviour without the need for traditional browser cookies. Traditionally, cookies have been a key component in tracking…
Continue reading "Cookieless website tracking and analytics"
—
PHP Security in 2024: navigating the evolving landscape
As PHP continues to evolve, so do the threats that target its vulnerabilities. Ensuring robust PHP security practices is paramount to safeguarding sensitive data and maintaining user trust. PHP is…
Continue reading "PHP Security in 2024: navigating the evolving landscape"
—
How to secure WordPress in 2023?
Securing a WordPress website involves a combination of practices, including using secure hosting configurations, regularly updating WordPress and its plugins/themes, and implementing strong security measures. While plugins can be useful…
—
ProtonMail secure email
ProtonMail is an encrypted email service that takes a radically different approach to email security. In 2014 the Swiss company ProtonMail became the first email service to protect data with…
—
Security: DNS over HTTPS
Whenever you visit a website, even if you are using a site with SSL, the DNS query that converts the web address into an IP address will be sent unencrypted.…
—
Best web browsers for security and privacy
A few alternative browser options for those looking to protect themselves against analytics, tracking, surveillance, and even censorship. Mozilla Firefox Iridium Ungoogled Chrome Tor Browser Mozilla Firefox Firefox is one…
Continue reading "Best web browsers for security and privacy"
—
GDPR: What is the EU General Data Protection Regulation?
The General Data Protection Regulation (GDPR) will have an impact on how organisations handle the personal information that they look after. GDPR is a regulation by which the European Parliament,…
Continue reading "GDPR: What is the EU General Data Protection Regulation?"
—
Anonymous Browsing
A few links to help secure your online activities private and secure. Browsing the web The Tor Browser is one of the best known anonymous browsing tools out there. It…
—
Why use an SSL?.. Number 3: Search Engine Optimisation
Security · 2. Confidence · 3. SEO Google has, since 2014, been giving sites with a secure certificate installed a boost within their ranking algorithm. Google has been telling web…
Continue reading "Why use an SSL?.. Number 3: Search Engine Optimisation"
—
Why use an SSL?.. Number 2: User Confidence
Security · 2. Confidence · 3. SEO As well as providing important security to your users the presence of an SSL certificate also enhances user confidence in your website and…
Continue reading "Why use an SSL?.. Number 2: User Confidence"
—
Why use an SSL?.. Number 1: Security
Security · 2. Confidence · 3. SEO The main reason to use an SSL certificate on your website is to secure sensitive information sent across the Internet. Keeping data encrypted…
—
Google Chrome getting a new Security Panel for developers
Google is set to add a new Security Panel to the Chrome browser to help developers visualise and troubleshoot network connections. The security panel provides developers with connection information for…
Continue reading "Google Chrome getting a new Security Panel for developers"
