Navigate This Site

Philip Ramsey Headlines

Saturday, February 5, 2011

A Job Applicant? Nope, It's A Malware Attack - my comments

In the article "A Job Applicant? Nope, It's A Malware Attack" businesses may avoid the costs and headaches associated with the security issues of Microsoft products, especially Windows security issues, by using open source software and Linux. For true security, the use of x64 (64 bit) Linux is essential. There are many distributions of Linux. Each are developed for specific environments, i.e. business, home, pleasure, multimedia, development, entertainment etc.

Wednesday, February 2, 2011

When an encrypted login is not secure - the security is broken

While attempting to login to your site via https://www.cch.ca/MyAccount/login.aspx I noticed the encryption is broken. Further investigation revealed a stylesheets and a number of scripts that are hosted on Google that are not encrypted. As a company that claims to be concerned with security why are CSS and JS files hosted by Google needed on your login page? Why do you want to give your users credentials to the world's most powerful search engine. I certainly do not want my CCH username and password showing up in Google's search results.