Security Articles

Upendo Ventures has exciting news to share! We are thrilled to announce the addition of the Glanton Modules intellectual property to our portfolio. This strategic move further strengthens our position in the content management system (CMS) industry and reinforces our commitment to delivering cutting-edge solutions to clients worldwide.

Our second and final session at DNN Summit 2021 was about upgrading DNN. After having upgraded thousands of DNN websites over the past 18 years, this session is the culmination of everything I've learned over that period of time. Most of the issues we run into tend to be completely avoidable.

Support can be called different things, including maintenance.  When using software, many people opt to not buy the optional support provided. However, there are many important reasons why one should not ignore purchasing a software support plan.

There are always updates throughout the internet that impact your website. Keeping up with them can seem downright impossible for most - even if you're in the industry. There are two major updates this year that you need to be highly aware of, though. If you don't adjust accordingly, the availability and discovery of your website could be drastically impacted.  

Every ASP.NET application has no less than one website configuration file - also called the web.config, since that's what the name of the file actually is. We often get asked a lot of questions about how to properly check-in the web.config and how to safely distribute the file across environments and developers. This article is going to disclose one of the tricks that we use for our clients. 

Sometimes it’s easy to forget some of the simple things when you've been working with something over a long period of time. When this happens, it's easy to overlook how technical, difficult, hidden, or simply not obvious things. You end up in something of an auto-pilot mode. This article helps to outline some of the quick-and-easy things that we often do after first installing DNN. 

Ever since computers have been widely available, we seem to be in a never-ending battle against the “bad guys” online.  They’re constantly trying to hack us, steal our private information, create fake identities, and so many other nefarious acts.  It’s difficult to keep up with all of the latest details and exploits that you could potentially be exploited by.  Here are a few tips to make your life a bit more worry-free, as well as protect you and your business at the same time.

If you’re in the developer community, and especially if you’re using or near any Azure conversations, you’ll continuously hear someone suggest Let’s Encrypt when it comes to securing your domain name.  You know, that thing you do to allow your website to use the HTTPS protocol to get that lock in front of it in the web browser.  I’ve tended to use NameCheap.com these days.  They’re cheap like their name suggests, and they’re super easier to use.  However, things just got even easier.

With all of the security breaches that have been happening over the years, I’ve always been skeptical of using a password manager.  Do you remember the (completely preventable) breaches at places like Target, Home Depot, and the massive one at Equifax?  Security is always a balancing act.  You’re constantly trying to walk that fine line between convenience and protection.  This high-wire act, unfortunately, leads many people into truly insecure password practices.  The most common taboos include writing it down somewhere, using the same one everywhere, and using passwords that increment by a single digit.  Historically, many data breaches have one or more of these as the root cause.