I think this is lovely. From first-hand experience, I know how often something as trivial yet important as "updating that horrible Joomla website to the latest bug-fixed version" gets low on a company's priority list. It's really just a reason to host your site in a SaaS CMS instead of uploading a bunch of PHP files yourself, but in case it's too late for that, having the hosting provider take care of this is lovely.
That said, I think the article is an odd mixture of business-speak and nerd-speak. As a coder, I'd like to know whether it fixes my handwritten SQL injection vulnerabilities too (probably not). My boss, however, probably will need a simpler version to get the point.
Thank you for your interest. The service focuses on fixing vulnerabilities in commonly used and popular software solutions such as WordPress, Drupal and Joomla. So, currently, we do not fix handwritten SQL injection vulnerabilities.
On a technical level it differs primarily on that it's not an external service that can only start responding after the website has been hacked; they treat the damage caused by a successful hack instead of preventing the hack in the first place. Because we can scan the code itself, we can actually patch vulnerabilities before they are being exploited. The beauty is in that we do not do "normal" updates but just patch the vulnerabilities in a non-obtrusive way, this prevents the website to fail because of incompatibilities.
"The beauty is in that we do not do "normal" updates but just patch the vulnerabilities in a non-obtrusive way, this prevents the website to fail because of incompatibilities"
Does this mean you're writing your own custom patches for every single versions of the software solutions you're supporting ?
Comments
I think this is lovely. From first-hand experience, I know how often something as trivial yet important as "updating that horrible Joomla website to the latest bug-fixed version" gets low on a company's priority list. It's really just a reason to host your site in a SaaS CMS instead of uploading a bunch of PHP files yourself, but in case it's too late for that, having the hosting provider take care of this is lovely.
That said, I think the article is an odd mixture of business-speak and nerd-speak. As a coder, I'd like to know whether it fixes my handwritten SQL injection vulnerabilities too (probably not). My boss, however, probably will need a simpler version to get the point.
Thank you for your interest. The service focuses on fixing vulnerabilities in commonly used and popular software solutions such as WordPress, Drupal and Joomla. So, currently, we do not fix handwritten SQL injection vulnerabilities.
On a technical level it differs primarily on that it's not an external service that can only start responding after the website has been hacked; they treat the damage caused by a successful hack instead of preventing the hack in the first place. Because we can scan the code itself, we can actually patch vulnerabilities before they are being exploited. The beauty is in that we do not do "normal" updates but just patch the vulnerabilities in a non-obtrusive way, this prevents the website to fail because of incompatibilities.
"The beauty is in that we do not do "normal" updates but just patch the vulnerabilities in a non-obtrusive way, this prevents the website to fail because of incompatibilities"
Does this mean you're writing your own custom patches for every single versions of the software solutions you're supporting ?
> The service focuses on fixing vulnerabilities in commonly used and popular software solutions such as WordPress, Drupal and Joomla.
What does this mean? Can you perhaps explain the service? Are these patches based on Drupal/Joomla security releases?