Turn Left - A weblog by InetSolution

Security Archives

By Jason Sherrill
Posted on Mar 9, 2010

Marc Rapport's advice in his article at CUTimes.com is a good reminder that even high-caliber security like MemberProtect provides is cannot protect bank and credit union user's who don't exercise good judgment when managing their online identities.

Continue reading "Good Security on Banking Site No Match for Poor Security Elsewhere" »

By Justin Gattuso
Posted on Mar 6, 2010

Security researchers have recently discovered a new black market malware application specifically targeting banking websites that offer ACH and wire transfer services. Similar to its popular counterparts Zeus and Clampi, Bugat works by harvesting logon, RBA and PIN credentials from infected users' machines, among other things. Most bank and credit union websites have few defenses against this type of malware application, but the latest versions of MemberProtect can help to render Trojan horse applications like Bugat ineffective.

Continue reading "New Bugat Malware Aimed at Banking Websites to Steal Customer Data" »

By Jason Sherrill
Posted on Mar 4, 2010

For some time now Google has warned its search users if your site contains malware or other dangerous code. Unfortunately, they did not provide any notification to webmasters of the hacked sites. This meant that website owners usually learned of hacking issues from their customers or site visitors. Not only can that be embarrassing for site owners, but it can also have a severe impact on sales and lead to potential identify theft, especially on banking websites.

Well, now I have good news, especially for banks, credit unions, retail e-commerce and other website owners for whom security and quick response to website hacks is of utmost concern. According to Google's Webmaster blog, Google will now notify webmasters when Googlebot has detected that a website has been hacked.

Continue reading "Google Will Now Alert You if Your Website Has Been Hacked" »

By Jason Sherrill
Posted on Feb 1, 2010

With so many users turning to the Internet for their banking activities, it's disappointing how few small banks and credit unions offer customers a live chat communication channel on their public facing websites. Live chat results in significant cost savings versus telephone support. Live chat also increases a bank or credit union's ability to convert visitors into new customers. Given these and other benefits, I'm consistently surprised at the two reasons managers most commonly give for not implementing live chat.

Continue reading "Banks and Credit Unions Missing Opportunities by Not Implementing Live Chat on Websites" »

By Donovan Myers
Posted on Aug 23, 2008

Last week I had the displeasure of applying for a new credit card and it's accompanying 0% balance transfer offer on the Internet. Now, I can't say that the whole process was horrible - and don't worry, everything worked out in the end - but one single thing could have made the process a lot more enjoyable:

Confirmations!

Read on to hear about my experience.

Continue reading "Online Banking No No: Um, what's going on here? " »

By Justin Gattuso
Posted on Jul 10, 2008

Obfuscation, aside from being a tongue-twister to pronounce, is an important topic within the realm of .NET development. While some folks around the inter-webs might have you believing that obfuscation is a useless, needless or worse - a complete joke and waste of your time - they couldn't be any further from the truth.

Continue reading ".NET Obfuscation - A Waste of Time? Or Not?" »

By Jason Sherrill
Posted on Feb 21, 2008

Today I signed into one of my AT&T accounts and was presented with their risk-based authentication (RBA) setup page. The challenge question choices they presented reminded me how important it is to follow a few simple rules when choosing challenge questions for your users to choose.

Continue reading "Best Practices for Choosing Challenge Questions for Bank and Credit Union Web Sites" »

By Jason Sherrill
Posted on Jan 4, 2008

Last week I got a new computer (IBM ThinkPad T60p), which means I retired my old ThinkPad T41. Today is the first time that I've tried to logon to my Chase online account to pay my credit card bill, which is due today. I've never had a problem logging on, but today the Chase online banking site has recognized that my computer fingerprint has changed. The hair-pulling experience I'm in the middle of right now has reminded me that it's a fine line we as software developers walk between creating tough-to-crack security while continuing to make sure our software is user friendly.

Continue reading "Tough Security vs. Good Usability on Chase Bank Website" »

By Jason Sherrill
Posted on Sep 21, 2007

PGP (www.pgp.com) is one of the most common methods of protecting financial data that customers submit through bank and credit union websites. PGP provides excellent data encryption, but many users leave sensitive PGP-encrypted data vulnerable without even knowing they’re doing so.

Continue reading "Encrypted Email -- Bank and Credit Union Employees Unknowingly Put Banking Data at Risk" »

By Jason Sherrill
Posted on Aug 2, 2007

The second most common question that managers at banks, credit unions and other financial institutions have asked me over the past year is, "What is the best way to secure our online forms, such as loan applications and contact us forms?" Here are a few simple guidelines your development team should follow when creating your online applications.

Continue reading "Seven Tips Every Bank and Credit Union Manager Should Know About Securing Online Forms" »

By Jason Sherrill
Posted on Jun 6, 2007

Mildew Stain Away is a fantastic mildew stain remover that also prevents mildew from returning. I used to buy it at Damman Hardware, but they've gone out of business. Last night, I discovered that Amazon Products, the manufacturer, sells the product directly on their website. But due to a major mistake on their website, I'm willing to bet that they're not selling nearly as much as they could.

Continue reading "optional checkout security = no sale" »

Who is InetSolution?

Donovan - Creative Director
Justin - Lead Architect & Developer
Somer - Graphic Designer
Mac - Programmer
Larry - Programmer
Mosh - Programmer
Paul - Technical Sales Architect
Jay - Weekend & Holidays Sys Admin
Karen - Business Development & Client Care
Jason - Project Director

Our Services

Web Design/Development
We practice a user-centered development philosophy. We work with clients who place their customer's needs first. We need to know who will use your site and why.
Secure File Exchange
Turn your website into a state-of-the-art file exchange system, requiring only a web browser, username and a password.
eCommerce Web Development
We have experience, know-how and superior customer support to ensure that your store is profitable and that your investment with InetSolution earns a high return.
Disaster Recovery Hosting
We provide fully-managed SQL server database hosting for companies seeking a warm disaster recovery site.

Category Archives

About InetSolution

We make business websites profitable. We do it with usable design, solid programming and unique, methodical marketing.