To educate, inform, inspire

WordPress Security

I had the honor of discussing WordPress security at the East Peoria WordPress meetup on April 15, 2019. Several individuals requested a copy of my slides so that is linked. Obviously, this was an introductory presentation. This information is provided as is and is for informational purposes only. All opinions […]

Read More

Installing SSL certificates

Given that I teach several classes dealing with security (and we even install SSL certificates on an IIS server in a couple of those), I thought it might be helpful for readers/ students to learn a little about what is required when you are using a Linux server. First, a […]

Read More

Book review: Digital Defense

Periodically, I review books for the American Library Association. I thought it might be helpful to students to include a copy of my latest book review here as well. This will be published in the June issue of Connect Magazine at the ALA site also. I do need to keep […]

Read More

Chrome Browser Extensions

Those who know me realize that I am always interested in web technologies and how they relate to business. I thought it might be helpful to identify some of the Chrome browser extensions I use on a regular basis (and my rationale for using them). Although I use a fair […]

Read More

Phishing = Fraud

Some of you may know that I serve as a reviewer for the SANS OUCH newsletter. The next issue will deal with the subject of phishing. I thought it might be appropriate to also add a little information in my weblog about this topic. Perhaps you will enjoy reading this […]

Read More

Rules to think about

We are near the midpoint of the fall semester at school. From time to time, I observe certain things and thought it might be helpful to put these together as a set of “rules” to think about – particularly for students in the CMWEB program at school. Of course, these […]

Read More

Dark Web Overview

Based on a recent article in Wired Magazine, I thought it might be helpful to touch on the “dark web” a bit.  After all, I do teach CMWEB 270 (Web Application Security) and often talk about the dark alleys on the Internet. But, first, a few disclaimers. Seriously. I do […]

Read More

Creating a new WordPress site

Some time ago, I posted basic information about securing your WordPress sites. Given that post has not been updated since 2012, I thought it was time. Rather than just re-hash the existing information, I decided to take a slightly different approach. I recently saw the need to create a new […]

Read More

2 factor authentication

I recently provided a post on passwords. I mentioned that one should employ 2 factor authentication where possible.  Given that many readers and students may use WordPress as a blog platform (or for other purposes as it is a rather flexible platform), I thought it might be helpful for individuals […]

Read More

Passwords

Passwords – “can’t stand them, can’t live without them.” We must access many computer resources every day and have to rely on passwords to verify we are who we say we are. I can’t count the number of times people ask me about what constitutes a good password. Therefore, I […]

Read More

Web Vulnerability Scanners

One of the many classes I teach is CMWEB 270 – Web Application Security. I thought it might be helpful to readers to review a couple of the tools one can use to automatically scan for website vulnerabilities. I consider it good practice to use a number of tools. Obviously, […]

Read More

Phone Scam

Readers of this blog probably know that I teach security topics. Since I recently experienced a rash of phone calls, I thought I would share my story with others. I do not recommend toying with the sorts of people who make these calls. I was just doing a bit of […]

Read More

Hack.me Site

The CMWEB 270 class I teach covers many of the fundamentals of ethical hacking. Of course, one of the main problems one encounters when teaching ethical hacking is providing links to vulnerable websites. Yes, one can easily create a vulnerable site. However, many hosting providers don’t like you to post […]

Read More

Notice to Appear

As a public service at the beginning of 2014, I thought it might be appropriate to grade some of the recent SPAM I have been receiving. I suspect the intent behind this SPAM is to incite fear in the recipient. Instead it incited humor in this recipient. As most students […]

Read More
Social media & sharing icons powered by UltimatelySocial