According to a report I’ve just glanced over, 9 out of 10 websites are “sitting ducks”. The article lists a whole range of problems that websites ranging from Cross-Site Scripting (XSS) exploits to Cross Site Request Forgery (CSRF). With such a range of issues most websites seem to have, it’s a wonder there’s any sites still around on the Internet!

Obviously, White Hat Security, the company who came up with the report recommends taking action as quickly as possible.

It’s reports like that that give security companies a bad name. It’s preposterous to claim that it’s only a matter of time before most websites will be run over by vermin and spontaneously combust. And if you don’t have alarm system monitoring you’d never even know about!

I agree with their assement, it would be good advice to follow:

.. finding and prioritizing all Web site properties by designating their importance to the business and a party responsible for their security; finding and fixing Web site vulnerabilities by assessing them for weaknesses with each code change; remediation of vulnerabilities done on a schedule based on severity; implementing a secure software development process using an organizational standard development framework; and implementing an in-depth Web site vulnerability management strategy.

But if I had to choose a company to supply my security services White Hat Security would be the last company I hire!

Internet Gurus will know what it is, but many that are new to the internet an e-commerce will not.

What you have to do is:

Think of a topical piece of news, that concerns you and your readers.

They will return the link because they think it is interesting or funny what you have written.

This is one of the keys to getting listed higher in google or social networking sites.

Then link in all relevant parties who have been discussing this.

It could be a list of your favorite websites, or list of resources.

Then let people know that you are linking to them. Like this one to Owen