Re:Why CMS are not fully secured?
by ktpsns on Friday April 26, 2019 @08:54AM
(#19756920)
I don't think that config file (or even script code) obfuscation is a sensible way of hardening a system. If the database access credentials are really the weak point of a system (I don't think so), the database authentication itself should be replaced by something more sophisticated, such as public/private keys, host based authentication, etc.
Re:Why CMS are not fully secured?
by bunkerify on Friday April 26, 2019 @08:59AM
(#19756961)
The main goal of pirates is to access the database configuration quickly. By hardening it, pirates will move on.
Wordpress, Drupal, Prestashop and Joomla have the same problem
Re:Why CMS are not fully secured?
by luckylion on Friday April 26, 2019 @08:37AM
(#19756781)
> We, at Bunkerify, have developped, thanks to our experience in IT security, algorithms to hide your secrets without modifying the behaviour and the ease of use of all these CMS.
> Our algorithms do deep obfuscation of the sensible content of configuration files, that make it unreadable by a human. A pirate have to make a very long work of reverse engineering to understand what we done, and then, try to counter it.
Re:Why CMS are not fully secured?
by tomhoward on Friday April 26, 2019 @09:48AM
(#19757400)
> Who upvotes this garbage?
Barely anyone, it seems. The content may not be great, but there's no need to be mean. It could be someone just trying out blogging for the first time. It also might be that English isn't their primary language.
> Our algorithms do deep obfuscation of the sensible content of configuration files, that make it unreadable by a human. A pirate have to make a very long work of reverse engineering to understand what we done, and then, try to counter it.
> Bunkerify uses deep security algorithms
Who upvotes this garbage?
Barely anyone, it seems. The content may not be great, but there's no need to be mean. It could be someone just trying out blogging for the first time. It also might be that English isn't their primary language.
We can just flag stuff like this and move on.
Haters gonna hate