Kommentare für TYPO3 Security Blog

Kommentar zu Handling of TYPO3 Security Issues from an Agency Perspective von Rick Cogley

Rick Cogley — Mon, 07 Nov 2011 23:32:56 +0000

Hello – good article. I think that bad news should be delivered “early and often” so I agree with your thinking.

It is a matter of how one “sells” the idea of good security to clients, and I find it is a continual process of education. If on the other hand, one keeps telling clients that “everything is fine” it lulls them, and you, into the false sense that nothing will go wrong. When it will. Certainly.

Regards
Rick

Kommentar zu Handling of TYPO3 Security Issues from an Agency Perspective von Thomas Esders

Thomas Esders — Wed, 02 Nov 2011 08:00:31 +0000

Hi Jan,

thanks a lot. I am always happy if people think the same.

Kommentar zu Handling of TYPO3 Security Issues from an Agency Perspective von Jan

Jan — Wed, 02 Nov 2011 06:51:00 +0000

Good read. I totally dig your three points, tranparency and good communications are key to a successful partnership with the customer.

Kommentar zu Handling of TYPO3 Security Issues from an Agency Perspective von Sebastian Michaelsen

Sebastian Michaelsen — Wed, 19 Oct 2011 15:27:08 +0000

You made some good points. I always emphasize to my clients that the risk of being hacked is not just a theorical thing. I speak with them about recent hacks (#antisec) and the consequences for the hacked companies.
In most cases this is pretty convincing.

Kommentar zu Tickende Zeitbomben: Zu wenige TYPO3-Admins spielen Security-Patches ein von Twitter Automation

Twitter Automation — Thu, 18 Aug 2011 03:22:06 +0000

Cheers for the writeup!

Kommentar zu Misunderstanding hacked websites von Helmut Hummel

Helmut Hummel — Fri, 05 Aug 2011 08:40:04 +0000

Duh, thanks. Fixed the link…

Kommentar zu Misunderstanding hacked websites von Peter

Peter — Fri, 05 Aug 2011 05:44:09 +0000

The link in the sentence “… I wrote a an article explaining …” is wrong

Kommentar zu TypoScript Security von Helmut Hummel

Helmut Hummel — Sat, 02 Jul 2011 20:39:09 +0000

Hi Philipp, if you only have one editor, that’s fine

Nevertheless it’s also more convenient for editors to just enter “foo & bar” as page title instead of “foo & bar”.

But that’s another story…

Kommentar zu TypoScript Security von Philipp Gampe

Philipp Gampe — Sat, 02 Jul 2011 18:38:53 +0000

Hi,

thanks for the post!

I never thought about
lib.menu = HMENU

I always trusted my editor

Kommentar zu TypoScript Security von Helmut Hummel

Helmut Hummel — Sat, 02 Jul 2011 16:57:45 +0000

Thanks 7elix. It’s fixed now.