A question of risk

By John Locke on July 27, 2011

How would losing your web site affect your business?
That might seem like a silly question, but a surprising number of small organizations don't think it can happen to them. Think again -- web sites get lost all the time, through a variety of means. The server hosting your site might have a hardware failure. Your site might get hacked. Your web developer might accidentally delete something critical. Your host might go out of business, leaving you stranded. If you're in the tech world, you hear about these incidents all the time.
When you're using a Content Management System (CMS) such as Drupal, Word Press, or Joomla, there are even more ways things can go wrong. Your database can get corrupted. There's lots more ways an attacker can break in. Your site changes much more often, so backups get more difficult. Traffic spikes can make your site unresponsive, with much less traffic than a static site. A security update can break functionality.
You really only have 3 options:

  1. Spend a lot of time making sure your site is kept up to date, backups are in good shape, and you're covered for the most likely causes of failure
  2. Pay somebody to make sure your site is kept up to date, backups are in good shape, and you're covered for the most likely causes of failure
  3. Take a chance that you won't have a mishap, and if you're wrong, pay the consequences of lost data, missed opportunities from having your web site gone, loss of reputation for not being able to keep a professional web presence, cost of hiring professionals to clean up the mess (potentially at a higher emergency rate)

Which choice have you made?
Obviously, if your web presence is not critical to your business, you can get away with door #3. At worst, you'll need to recreate your site from scratch. For personal sites, hobby sites, or small businesses who mainly market their services through other means, a $10/month shared host and a $500 site may be all you need.
As your business grows, however, that becomes less and less an acceptable choice. You buy insurance, don't you? Why not take measures to prevent you from having a major business setback?
What needs to be done to cover the most likely causes of failure?
At Freelock, we spend a lot of time thinking about what can go wrong with a web site, and how we can prevent failures from hurting our clients' operations. The cornerstone is having really good backups.
Is one backup enough? Find out next...
Or skip ahead to some of the other things we think about when helping our customers protect themselves from data loss:

Free Tagging Area

Add new comment

The content of this field is kept private and will not be shown publicly.

Filtered HTML

  • Web page addresses and email addresses turn into links automatically.
  • Allowed HTML tags: <a href hreflang> <em> <strong> <blockquote cite> <cite> <code> <ul type> <ol start type> <li> <dl> <dt> <dd> <h1> <h2 id> <h3 id> <h4 id> <h5 id> <p> <br> <img src alt height width>
  • Lines and paragraphs break automatically.

Drupal Canvas — Block HTML (locked)

  • Allowed HTML tags: <strong> <em> <u> <a href> <p> <br> <ul> <ol> <li>

Drupal Canvas — Inline HTML (locked)

  • Allowed HTML tags: <strong> <em> <u> <a href>

More Like This

Code monster
🕑Mar 29, 2018 🖋John Locke 💬3

Drupalgeddon2: Should I worry about critical security updates?

No, you should not. You should let us worry about them, and go back to your business.

Seriously, we're getting questions from all kinds of people about whether this matters. I'm a bit surprised that there is any question about that. Would you be concerned if your top salesperson was selling for somebody else? If your cashiers were jotting down credit card numbers when they charged a card? If your office became a well-known spot for illicit drug or gun dealers? If your office had a bunch of scammers squatting and running a pyramid scheme? If your confidential client information could be revealed as easily as using a bic pen on an old Kryptonite lock?

Bic Pen vs Kryptonite Lock

We've seen some variation of every single one of those scenarios. And all of them are possible with a remote code execution flaw in a web application, like yesterday's Drupal security vulnerability.

And yet people still

Meltdown
🕑Jan 15, 2018 🖋John Locke 💬0

Meltdown notes

The Meltdown vulnerability leaked out into public news a full week before patches were available for many distributions. When patches did become available, sometimes the patch caused further trouble.

Meltdown in action
🕑Jan 11, 2018 🖋John Locke 💬1

The Spectre of a Meltdown

The news was supposed to come out Tuesday, but it leaked early. Last week we learned about three variations of a new class of attacks on modern computing, before many vendors could release a patch -- and we come to find out that the root cause may be entirely unpatchable, and can only be fixed by buying new computers.

Today Microsoft released a patch -- which they had to quickly pull when they discovered that it crashed computers with AMD chips.

Essentially Spectre and Meltdown demonstrate a new way of attacking your smartphone, your laptop, your company's web server, your desktop, maybe even your tv and refrigerator.

Meltdown - Animated
Meltdown in Action

This all sounds dreadfully scary. And it is... but don't panic! Instead, read on to learn how this might affect you, your website, and what you can do to prevent bad things from getting worse.