Infrastructure

As was widely reported yesterday, a critical unknown vulnerability was found in log4j, an open-source logging library used by apps and services across the internet If exploited, the vulnerability would allow remote code execution on vulnerable servers When this zero-day exploit was announced, we began a deep dive in to reviewing the impact that this would have on us and you and made an announcement on Twitter that we were aware of this vulnerability With clients that have reached so far to get information regarding this, there appears to be some confusion over what is impacted This …

When you are surfing online, or checking your email, in 2021 most of these connections to either of these are done with a small data file that digitally binds a cryptographic key to the organization’s details by using a SSL (Secure Sockets Layer) to establish a secure connection In plain language, this connection establishes an encrypted connection between the web browser and a web server With this secure connection over https as opposed to http, this provides you a level of trust when you are potentially sending sensitive information like credit cards, usernames, passwords, emails, …

Are you interested in hosting your web applications on the Amazon Web Services (AWS) cloud Now you can—with FullHost by …

FullHost is very pleased to announce that the LiteSpeed Web Server, a drop-in replacement that is completely compatible with the traditional process driven architecture of Apache, has recently revised its product offering additional features and options for clients As part of the license changes they have introduced the Site Owner license series that provides clients with a small number of domains hosted on a virtual or dedicated server an option to take advantage of the great benefits that LiteSpeed Web Server already offers, which has a proven track record of increasing speed and …

At FullHost we are always committed to the highest and latest security standards We want you to feel confident that we are protecting the privacy of your information To meet the latest PCI Data Security Standards (PCI DSS), we have fully disabled TLS version 10 and 11 on all servers we manage This includes our Shared and Enterprise Hosting, Reseller Hosting, WordPress Hosting, Email Hosting, and any Virtual or Dedicated server that is managed by us Additionally, our own Client Portal and website have had previous versions of TLS disabled What is TLS Transport Layer Security (TLS) is a …

Earlier this week, a number of very serious security vulnerabilities were disclosed (CVE-2017-5715, CVE-2017-5753, and CVE-2017-5754) As we’ve been made aware of these security flaws that originally appeared to be affecting Intel processor chips, that could circumvent the contents of protected kernel memory areas, we’ve been actively working internally and with our vendors to and gathering as much information as possible to understand the full impact on our infrastructure Much of the initial research and findings has been held under a strict embargo by Intel, which has hampered our …