EnterpriseDT Security Blog
Our business is information security, and so we blog on a variety of topics in this area. We often comment on the security aspects of current affairs, as well as providing technical discussion on cryptography and related areas such as privacy. We are particularly interested in secure protocols such as SSL/TLS and SSH. Our flagship product is CompleteFTP, a Windows server supporting FTPS, SFTP, SCP and HTTPS, all of which are reliant on SSH and SSL/TLS.
Until recently, the easiest way to get a free FTPS server up and running on Windows was to download and install Filezilla server. Simple, free and robust, Filezilla server was a perfectly adequate solution.
But there were some nagging issues. Filezilla server has never managed to make it out of beta status, and that’s not ideal if you want a production-quality solution. Also, getting support for Filezilla […]
We’ve previously discussed the poor security of many devices on the Internet of Things (IoT) – the network of “smart” devices connected by the Internet. Unfortunately in their race to implement features, vendors seem to rate IoT security very low on their list of priorities. Often, IoT devices are protected by factory default or hard-coded usernames and passwords. Such poor security practices results in millions of connected devices that almost […]
Server reliability is of primary importance in our networked world. Billions of dollars in e-commerce is utterly dependent on reliable servers and reliable networks connecting those servers to users.
The Australian stock exchange (ASX) recently had a bad day when their trading system failed. Market opening was delayed by 90 minutes, and after experiencing problems during trading, they were forced to close two hours early. Subsequently, some trades had to be cancelled.
For a […]
If you have a Yahoo account, have you been affected? The best course of action (given the huge number of user accounts affected) is to assume that you have been – and change […]
We published a blog series two years ago on how to secure an SFTP server. Given it is such a pertinent topic, we’re highlighting the posts again here. These points are relevant to all servers, not just SFTP servers, and should be read by server administrators. Although it refers to our server, CompleteFTP, the suggestions are applicable to and useful for all SFTP and FTP/FTPS servers.
Posts are listed below:
Legacy server protocols can be dangerous, particularly those which were once widely used and are no longer well known. Why do these legacy protocols present a danger? Because people forget they exist – and younger IT workers may never have encountered them.
This issue was recently highlighted in an interesting blog post about the telnet protocol. Telnet, created in 1969, was once used everywhere. It was the default way […]