Firefox Logo

How to Enable DNS over HTTPS in Firefox

, , , ,

Web site domain names, like endurtech.com, are simply a human friendly representation of Internet Protocol Address (IP Address). Rather than typing in or memorizing the four sets of three numbers (IP4) for Google.com, developers came up with the Domain Name Server (DNS) protocol. When you type in any domain name, this protocol looks up the associated numerical address and tells your browser where to go. Think of it as a hidden operator directing traffic on the world wide web.

The DNS over HTTPS (DoH) protocol works similarly to how the normal DNS protocol works. The major difference is the added privacy that it provides by encrypting your web related request and traffic. DoH takes your DNS query and sends it to a DoH-compatible DNS server via the encrypted HTTPS connection.

This way, DoH “hides” your DNS queries inside regular HTTPS encrypted traffic and bypasses the default DNS settings that exist at the operating system level. In most cases these are the ones set by your local internet service provider (ISP). What this means is that third-party “observers” won’t be able to “sniff” your web traffic and tell what DNS queries you have run and discover what web site(s) you are accessing. Best of all, the DoH protocol works at the App level as well!

Currently, only Mozilla’s Firefox browser has released instructions for enabling use of this protocol, but you’ll have to manual enable it. See instructions below on how to do just that.

 

Read more

Disable XML-RPC on WordPress Website

Disable access to XMLRPC in WordPress

, , , , ,

The following kinds of attacks on WordPress websites, specifically targeting xmlrpc.php, have received increasing press coverage since 2015:

[su_list icon=”icon: bug” icon_color=”#157BAE”]

[/su_list]

If you (via an app) or your website (via a plugin) are not using the xmlrpc functionality then it may be wise to disable access to xmlrpc.php

There are several free and premium plugins to choose from on the official WordPress repository. Remember, disabling access to the xmlrpc file may break API functionality that your applications or plugins rely upon.

Later in this article will show you how to disable access to the xmlrpc without using any WordPress plugins.

 

Read more

Windows Logo

How to Disable Windows 10 Customer Experience Improvement Program

, , , , ,

The Customer Experience Improvement Program (CEIP) is a discrete feature that collects your computer systems information and usage patterns and transmits it back to Microsoft.

Microsoft ensures that this program doesn’t collect any personal information but there isn’t a way to verify what it is sending out.

If you value your privacy, as I do, and wish to disable the Windows 10 CEIP feature this article will show you how.

 

Read more

WordPress Content Management System Icon

Update Your WordPress Database Prefix for Better Website Security

, ,

When you install WordPress, it creates a few database tables beginning with the prefix of “wp_“. Despite being provided the option to change the prefix upon installation, many simply do not. Hackers anticipate this when constructing their malicious code and executing their attacks.

The good news is that you can change the default table prefix, post-install. This helps prevent some malicious code from executing but by no means is this perfect. This can be likened to taking a oral supplement to help prevent catching a cold.

 

Read more

How to Fix Windows 10 Update Error

How to Easily Fix Microsoft Windows Update Error Encountered

, , , ,

 

NOTE: MICROSOFT HAS ACKNOWLEDGED THE ISSUE (DNS RELATED).
IT HAS NOW BEEN RESOLVED.

 

Since late January 2019, some users began complaining that the Microsoft Windows Update service stopped working. Others say they are even prevented from accessing the Microsoft Store and Upgrade services. When attempting to manually update Windows, the Windows Update service displays the following error:

Error encountered We’ll continue to check daily for newer updates. We couldn’t connect to the update service. We’ll try again later, or you can check now. If it still doesn’t work, make sure that you’re connected to the Internet.

As for solutions, Softpedia found a complex workaround involving changing your computer’s DNS settings. However, this isn’t the easiest solution to implement so we developed our own, simpler, fix to the recent Windows Update Error.

Read more

WPFront User Role Editor Plugin

Multisite Security Flaw in WPFront User Role Editor

, , , ,

Recent events showcase that the team managing WordPress is committed to security.

Plugins are removed from the WordPress.org plugin directory once WordPress is made aware of any security related issues related to a plugin or theme within their directory and have verified their authenticity.

 

WPFront User Role Editor Withdrawn

This is what happened on Jan. 20th, 2019 to the WPFront User Role Editor, which has been temporarily withdrawn from the WordPress.org plugin directory. It was reported and verified to have an exploitable security flaw but only when installed on a WordPress website utilizing Multisite installation.

 

Read more

GoDaddy Real User Metrics Javascript Injection Removal

GoDaddy Injecting Real User Metrics into Customer Websites

, ,

The popular domain registrar, GoDaddy, is injecting Real User Metrics (RUM) JavaScript into its US based customer websites. Without notifying them first!

Issues with GoDaddy Real User Metrics

In some instances this injected JavaScript code may slow your websites’ performance or even render it inoperable. This bit of information is straight from GoDaddy’s own website.

 

Read more

WooCommerce WordPress eCommerce

WooCommerce Vulnerability Recently Fixed

, , , , , ,

A design flaw within the WordPress permission system and the eCommerce plugin, WooCommerce, could allow someone to alter account privileges on your WordPress website.

According to new research by Simon Scannell, a researcher for PHP Security firm RIPS Tech, when WooCommerce is installed it will create a Shop Manager role. The Shop Manager user role has the “edit_users” WordPress capability/permission enabled. This capability allows users to edit any WordPress user.

 

Read more

Website Listing Service SCAM Letter from Domain Listing Company

SCAM, Website Listing Service Letter from Domain Listings

, , , , ,

We recently received an email from a client inquiring about a suspicious letter from a company called Domain Listings LLC that they received in the mail.

A closer look at this letter (near the center) reveals that it is a “solicitation” and “not a bill.”

What should I do If I get a letter from Domain Listings?

Read more

Windows 10 File Deletion Bug October 2018 Update

Microsoft Update Data Deletion Bug Warning

, ,

Microsoft began rolling out the October 2018 Update for  Windows 10, version 1809, recently. Shortly afterwards reports began rolling in that the update resulted in the loss of end user data. Microsoft is now advising anyone who had manually downloaded the update, but not yet installed it, to not do so until further notice.

This is a significant blow to credibility which will undoubtedly result in hesitation next time end users go to update. Afterall, who needs to worry about hackers and malware when your operating system will destroy your files without any indication or reason.

 

Read more