If you haven’t seen the much ballyhooed throw down between normal website security and that of websites created using the MemberProtect framework, then you’re missing one of the most exciting 60 seconds of video on the Internet. Hasten to our blog to watch the battle unfold. [More]
Jul 2, 2010 • by Jason Sherrill
The state of Massachusetts' new data security law, 201 CMR 17.00, will impact many web based applications that collect and store personal financial information about users. The new law reaches beyond the state's borders and affects organizations that are collecting and storing personally identifiable information (PII) about Massachusetts residents. Even if you don't have a physical presence in Massachusetts, the long arms of this law still reach out to you if you collect or store personal information on any Massachusetts resident. [More]
Apr 28, 2010 • by Jason Sherrill
A common security practice in online banking authentication systems is to ask users to choose a security image and save it as part of their online profile. The purpose of these security images is to mitigate the risk of phishing attacks. In theory, if a user does not see his security image when logging in, he should not enter his password into the site. But banking sites that use these standard security images are prone to image harvesting attacks. MemberProtect gives developers a feature that makes this anti-phishing feature more stout and able to better defend against image harvest attacks. [More]
Apr 26, 2010 • by Jason Sherrill
Last month I wrote about rumors that Google would be introducing a page load speeds as a factor in search rankings. Today Matt Cutts, Google engineer and blogger, confirmed that the rumors are true. Here's what we know so far. [More]
Apr 9, 2010 • by Jason Sherrill
InetSolution provides not only secure website hosting for banking sites, but we also provide application development and security consulting. Even with all of the security awareness present in the financial industry, the overwhelming majority of banks and credit unions that fail our basic website form security audit. At a bare minimum, any form that collects information from visitors to your website should meet these criteria. [More]
Apr 9, 2010 • by Jason Sherrill
