Latest News

    • Web Services Architecture – When to Use SOAP vs REST

      23 / 13 Oct 2014

      SOAP (Simple Object Access Protocol) and REST (Representation State Transfer) are popular with developers working on system integration based projects. Software architects will design the application from various perspectives and also decides, based on various reasons, which approach to take to expose new API to third party applications. As a software architect, it is good practice to involve your development team lead during system architecture process.   This article, based on my experience, will discuss when to use SOAP or REST web services to expose your API to third party clients.   Web Services Demystified Web services are part of the Services Oriented Architecture. Web services are used as the model for process decomposition and assembly. I have been involved in discussion where there were some misconception between web services and web API.   The W3C defines a Web Service generally as:   A software system designed to support interoperable machine-to-machine interaction over a network.   Web API also known as Server-Side Web API is a programmatic interface to a defined request-response message system, typically expressed in JSON or XML, which is exposed via the web – most commonly by means of an HTTP-based web server. (extracted from Wikipedia)   Based on the above definition, one can insinuate when SOAP should be used instead of REST and vice-versa but it is not as simple as it looks. We can agree that Web Services are not the same as Web API. Accessing an image over the web is not calling a web service but retrieving a web resources using is Universal Resource Identifier. HTML has a well-defined standard approach to serving resources to clients and does not require the use of web service in order to fulfill their request.   Why Use REST over SOAP Developers are passionate people. Let's briefly analyze some of the reasons they mentioned when considering REST over SOAP:   REST is easier than SOAP I'm not sure what developers refer to when they argue that REST is easier than SOAP. Based on my experience, depending on the requirement, developing REST services can quickly become very complex just as any other SOA projects. What is your service abstracting from the client? What is the level of security required? Is your service a long running asynchronous process? And many other requirements will increase the level of complexity. Testability: apparently it easier to test RESTFul web services than their SOAP counter parts. This is only partially true; for simple REST services, developers only have to point their browser to the service endpoints and a result would be returned in the response. But what happens once you need to add the HTTP headers and passing of tokens, parameters validation… This is still testable but chances are you will require a plugin for your browser in order to test those features. If a plugin is required then the ease of testing is exactly the same as using SOAPUI for testing SOAP based services.   RESTFul Web Services serves JSON that is faster to parse than XML This so called "benefit" is related to consuming web services in a browser. RESTFul web services can also serve XML and any MIME type that you desire. This article is not focused on discussing JSON vs XML; and I wouldn't write any separate article on the topic. JSON relates to JavaScript and as JS is very closed to the web, as in providing interaction on the web with HTML and CSS, most developers automatically assumes that it also linked to interacting with RESTFul web services. If you didn't know before, I'm sure that you can guess that RESTFul web services are language agnostic. Regarding the speed in processing the XML markup as opposed to JSON, a performance test conducted by David Lead, Lead Engineer at MarkLogic Inc, find out to be a myth.   REST is built for the Web Well this is true according to Roy Fielding dissertation; after all he is credited with the creation of REST style architecture. REST, unlike SOAP, uses the underlying technology for transport and communication between clients and servers. The architecture style is optimized for the modern web architecture. The web has outgrown is initial requirements and this can be seen through HTML5 and web sockets standardization. The web has become a platform on its own right, maybe WebOS. Some applications will require server-side state saving such as financial applications to e-commerce.   Caching When using REST over HTTP, it will utilize the features available in HTTP such as caching, security in terms of TLS and authentication. Architects know that dynamic resources should not be cached. Let's discuss this with an example; we have a RESTFul web service to serve us some stock quotes when provided with a stock ticker. Stock quotes changes per milliseconds, if we make a request for BARC (Barclays Bank), there is a chance that the quote that we have receive a minute ago would be different in two minutes. This shows that we cannot always use the caching features implemented in the protocol. HTTP Caching be useful in client requests of static content but if the caching feature of HTTP is not enough for your requirements, then you should also evaluate SOAP as you will be building your own cache either way not relying on the protocol.   HTTP Verb Binding HTTP verb binding is supposedly a feature worth discussing when comparing REST vs SOAP. Much of public facing API referred to as RESTFul are more REST-like and do not implement all HTTP verb in the manner they are supposed to. For example; when creating new resources, most developers use POST instead of PUT. Even deleting resources are sent through POST request instead of DELETE.   SOAP also defines a binding to the HTTP protocol. When binding to HTTP, all SOAP requests are sent through POST request.   Security Security is never mentioned when discussing the benefits of REST over SOAP. Two simples security is provided on the HTTP protocol layer such as basic authentication and communication encryption through TLS. SOAP security is well standardized through WS-SECURITY. HTTP is not secured, as seen in the news all the time, therefore web services relying on the protocol needs to implement their own rigorous security. Security goes beyond simple authentication and confidentiality, and also includes authorization and integrity. When it comes to ease of implementation, I believe that SOAP is that at the forefront.   Conclusion This was meant to be a short blog post but it seems we got to passionate about the subject.   I accept that there are many other factors to consider when choosing SOAP vs REST but I will over simplify it here. For machine-to-machine communications such as business processing with BPEL, transaction security and integrity, I suggest using SOAP. SOAP binding to HTTP is possible and XML parsing is not noticeably slower than JSON on the browser. For building public facing API, REST is not the undisputed champion. Consider the actual application requirements and evaluate the benefits. People would say that REST protocol agnostic and work on anything that has URI is beside the point. According to its creator, REST was conceived for the evolution of the web. Most so-called RESTFul web services available on the internet are more truly REST-like as they do not follow the principle of the architectural style. One good thing about working with REST is that application do not need a service contract a la SOAP (WSDL). WADL was never standardized and I do not believe that developers would implement it. I remember looking for Twitter WADL to integrate it.   I will leave you to make your own conclusion. There is so much I can write in a blog post. Feel free to leave any comments to keep the discussion going.

    • Liferay and AngularJS Made Simple: Connecting AngularJS to a Backend with REST and JSON

      24 / 01 Oct 2014

    • Big Data Architecture Best Practices

      7 / 25 Sep 2014

    • 4 Reasons Football Teams Should Use Big Data and IoT

      177 / 17 Sep 2014

    • Technology news about start-ups big data cloud IoT Liferay

      11 / 08 Sep 2014

    • I Got hacked today and never use GoDaddy.com for hosting

      24 / 31 Dec 2012

    • PaaS Cloud - The Rise of The Developer Entrepreneur

      66 / 22 May 2012

    • Developers should not believe the HTML5 hype

      30 / 06 May 2012

    • 5 Things all Java developer should know when developing for the cloud

      623 / 30 Apr 2012

    • The traveling robot problem

      6 / 25 Apr 2012

    • Primefaces Mobile - Weather App Example

      504 / 20 Apr 2012

    • Parachutist Dilemma - a parallel programming problem

      5 / 19 Apr 2012

    • Cloud computing vs Open Source - Most CIO cannot tell the difference

      8 / 20 Feb 2011

    • Apple vs Geeks - is this the end of a love affair?

      5 / 12 Apr 2010

    • Facebook Patents RSS-like Technology - Is That a Joke?

      35 / 26 Feb 2010

    • Will Oracle really make NetBeans the BEST IDE for Java

      15 / 31 Jan 2010

    • Google Analytics vs Woopra

      3 / 05 Jan 2010

    • Happy New Year Techies!!!

      7 / 31 Dec 2009

    • Dummies Guide to GWT and OpenID - with example code

      211 / 23 Dec 2009

    • Firefox IE8 Chrome Opera Safari - best browser for Java?

      10 / 17 Dec 2009
Monday, 31 December 2012
Home > threat > I Got hacked today and never use GoDaddy.com for hosting

I Got hacked today and never use GoDaddy.com for hosting


 I'm going to get straight to the point; the last 24hrs one of my domain got hacked. Initially I thought it was one my developer messing stuff on the server. Today, 31st December 2012, I tried accessing the domain through the web browser to see if they were any updates from the development team. When tried to browse to the web site, my antivirus started to go crazy: Threat detected - Exploit Blackhole Exploit Kit (type 2371). First thing I did was to get the team on the phone and you can imagine how conversation went. These are the steps have taken so far:


Conversation with dev team: in summary; make sure that you didn't use any code that you copied and pasted from the internet and change all user names and passwords.

Conversation with GoDaddy Support:
Godaddy: Hi, How can I help you today?
Me: My domain xxxx got hacked today...
G: Ok?! What can we do for you?
M: I would like to have a copy of the FTP log for my domains, please.
G: Oh...we can't do that
M: Why not?
G: It's for security reason that we cannot provide you with the logs.
M: very strange as my account got hacked and this means that you have an intruder on your network, therefore you system is potentially vunerable to more attacks...
G: Sorry sir but our systems are secured...
M: clearly not, so what do you suggest I do?
G: You can delete all files and folders in your domain...
M: We are alreay reverting the system to a backup state but that does not garantee to our system will be safe from any hidden script put in place by the hacker...
G: Sorry but that's all we can do...
M: Do you have a virus scanner that you can run on our domain?
G: Yes...Let me check the cost for that...It will cost about £45+VAT
M: Is there any default protection that comes with my package, I am on the Ultimate package?
G: No, there isn't any default antivirus provided for any packages...
M: So there is nothing I can do check for viruses and malware unless I pay the £45?
G: No, you have to pay for the service...
M: No problem, I'll just take my business to a more secure hosting provider
G: Ok.
M: Good bye!

Now, if you navigate to Godaddy hosting page you will see that there is a malware scanner provide but no antivirus therefore leaving my systen open to threats. It is shame because I have been with them for quite awhile but you can only the strength in a relationship only when it is put to the test. On this final note, I do not recommend GoDaddy hosting for any businesses.

Feel free to share your views in the comments.
Posted by Unknown at 16:41

Related Posts

    • Blogger Comments
    • Facebook Comments

    24 comments :

    1. Anonymous31 December 2012 at 17:25

      So through your poor password security, your site got hacked.

      A better message would be to keep passwords secure.

      ReplyDelete
    2. Zhiqiang1 January 2013 at 12:48

      My friend meet the same problem...

      ReplyDelete
    3. neonet17 May 2013 at 19:41

      This is very nice and informative blog thanks for sharing this informationare
      ↓↓↓↓↓↓↓↓

      godaddy coupons codes

      ReplyDelete
    4. Unknown14 November 2013 at 04:58

      Thanks for sharing information, i now can check out for other hosting service.

      Web Services

      ReplyDelete
    5. Unknown28 January 2014 at 02:59

      Sorry to hear that, I used to use GoDaddy for my hosting .. but I have some problems and made ​​me a little disappointed with them, I finally decided to move from GoDaddy to other hosting providers.

      ReplyDelete
    6. Go4hosting KB Images12 May 2015 at 13:46

      You can also get domains at cheap prices at Go4hosting. They provide domain cum web hosting services which are better in quality and also provides the technical support to the customers to troubleshoot the problems.

      ReplyDelete
    7. Go4hosting KB Images12 May 2015 at 13:47

      You can also get domains at cheap prices at Go4hosting. They provide domain cum web hosting services which are better in quality and also provides the technical support to the customers to troubleshoot the problems.

      ReplyDelete
    8. sameer13 June 2020 at 05:50

      I wanted to thank you for this excellent read!! I definitely loved every little bit of it. I have you bookmarked your site to check out the new stuff you post. web hosting pakistan

      ReplyDelete
    9. Jason Roy17 June 2020 at 11:19

      mediatemple coupons These hosting service providers will even provide support in setting up an email address so that you can act as a real company.

      ReplyDelete
    10. Jackrichard24 June 2020 at 13:29

      Extraordinary pictures and incredible post, I like how much work you put into your page and ideally, others will welcome it too. Individuals have made pages into a business and just wish to show includes however reality of page making is to teach your clients. Keep doing awesome. . I just upload…. Bluehost Reviews

      ReplyDelete
    11. Jason Roy3 July 2020 at 10:58

      This spurt will be attributed to the increase in demand by companies who want PR firms to handle daily interactions with consumers and the press on their social media sites such as Facebook and Twitter. tiktok

      ReplyDelete
    12. Jason Roy10 July 2020 at 07:15

      Hosting companies maintain large networks of high-powered web server computers in a physical location known as a data center. Coupon codes 2020

      ReplyDelete
    13. M. Taha10 October 2020 at 19:50

      Nice post! This is a very nice blog that I will definitively come back to more times this year! Thanks for informative post. Prowebhosting

      ReplyDelete
    14. SHAHZAIB15 October 2020 at 09:47

      thanks for this usefull article, waiting for this article like this again. bulletproof hosting provider

      ReplyDelete
    15. ramiz27 October 2020 at 18:57

      I am hoping the same best effort from you in the future as well. In fact your creative writing skills has inspired me.
      jasa pembuatan website

      ReplyDelete
    16. UfaNews8005 January 2021 at 22:22

      I conceive you have noted some very interesting points, regards for the post.
      สล็อตเล่นง่าย แตกไว เว็บไหนดี

      ReplyDelete
    17. newprofile21 August 2021 at 15:09

      There are multiple types of web hosting services which are available in the market today, each of them are well preferred by their specific customer niches, depends on their specific requirements and needs. Come let us find out some of the common web hosting services, 1. Dial up Access Hosting - this is the most basic type of hosting and access service that anyone would ever had when web hosting service was introduced. https://onohosting.com/

      ReplyDelete
    18. Shaniya24 August 2021 at 10:42

      Read here about Umrah Trip From India: Visa Eligibility, Cost, Ideal Time And Duration, More

      ReplyDelete
    19. Anonymous24 August 2021 at 20:44

      Canon Pixma MG3620 Review

      ReplyDelete
    20. Anonymous24 August 2021 at 20:45

      Benefits of Munakka

      ReplyDelete
    21. Unknown5 September 2021 at 17:21

      At this point you'll find out what is important, it all gives a url to the appealing page: dringendes indisches Visum

      ReplyDelete
    22. Anonymous5 February 2022 at 10:39

      Great content, amazing post altogether! keep posting such quality posts would be delighted to be updated with the latest on your blog,
      Regards
      Best Cheap Web Hosting

      ReplyDelete
    23. Nathan5 March 2022 at 05:47

      The content you shared with us is great. Thanks for sharing it. You can apply for an Indian business visa by clicking the link we just provided. Thanks for adding value to the post.

      ReplyDelete
    24. Ashley marsh8 June 2022 at 10:49


      Great, I would like to say a big Thankyou for this special Article. What are the basic UK visa requirements for Kenyan citizens ? Simply as , 1. A recent, coloured, digital, passport-size photograph 2. Details of travel plans. And 3. return ticket . These are the basic requirements. In short, if you want to know more deeply please visit the web.


      ReplyDelete

    Item Reviewed: I Got hacked today and never use GoDaddy.com for hosting Description: Rating: 5 Reviewed By: Unknown
    Subscribe to: Post Comments ( Atom )