Recovering from attacks

A hacked neglected site, Pantheon migration, and why you need a Drupal Site Assessment
We recently had a new client contact us and ask if we could move their sites over to Pantheon so they could do some in-house development work. Of course we can do that for you!
Freelock status on Bash ShellShock vulnerability
The short answer: Not Vulnerable.
We've been asked by several customers about whether they or we are affected by the recently discovered Bash ShellShock vulnerability. And to the best of our knowledge, we are completely unaffected.
I've got a theory: The Scientific Method applied to web site performance
What can you do about this page being so slow? That's a question we've been asked by half a dozen customers in the past 6 months, and as it turns out, we can do quite a lot.

Heartbleed - Do you need to do anything?
Everybody is writing about Heartbleed this week. The reason? It probably affects more people than any other vulnerability we've ever seen. If you ever log into any web site, anywhere, your password might be revealed -- and that is just the start. The biggest problem?
Ask Freelock: Spammers getting their just desserts?
Ha. Just got another message from a client who has been the victim of several comment spam campaigns:
Fate doesn't like to be tempted
Not 4 hours after posting my most recent blog stressing the importance of setting up systems with disaster recovery in mind, fate stepped up and thwacked me. "Oh yeah, think you're so resilient?
A security reminder
Yesterday Drupal.org got hacked, and potentially all the password hashes on the site fell into malicious hands.
Guest Post: Cross Site Scripting with ChEF - A Beginners Guide
XSS is short for Cross-Site Scripting, but you probably might ask why the short term is not CSS instead. That's because CSS is already used for Cascade Style Sheets, a pre-existing language for defining styles for web pages, so using XSS will prevent confusion.
Drupal Rescue Shop
Sometimes bad things happen to good people. And sometimes people get in over their head and need help. At Freelock, we are here to help. If your previous web developer jumped ship and left you high and dry, don’t panic, just pick up the phone and call us for help!
Confidentiality, Integrity, or Availability
Not 2 weeks after my newsletter calling out how people take for granted that nothing bad will happen to their web sites, two of the biggest providers went down yesterday, Amazon and Akamai, in several separate incide
A question of risk
July 2011
How would losing your web site affect your business?
That might seem like a silly question, but a surprising number of small organizations don't think it can happen to them. Think again -- web sites get lost all the time, through a variety of means. The server hosting your site might have a hardware failure. Your site might get hacked. Your web developer might accidentally delete something critical. Your host might go out of business, leaving you stranded. If you're in the tech world, you hear about these incidents all the time.
Incident Response
All the planning and preparation in the world won't prevent an incident, but it can greatly reduce the consequences.
Nothing better prepares you for responding to disaster than experience. In the world of web applications, sometimes we act as firefighters, coming in to rescue the smoldering remains of a hacked site, a crashed server, or an unexpected traffic burst.