DreamHost, a hosting network, was forced to reset its users’ passwords after a hacking invasion last Friday. Paul Kenyon, a privilege management specialist for Avecto, explained in a press release why this happened, and what DreamHost could have done to avoid this. Kenyon’s contribution of expertise is a lecture on privilege management software and security.
"We know that DreamHost's shared and dedicated hosting network consists of a series of Web servers and that the controlling software is a customized application that was developed in-house. If the developers had integrated privilege management software into their customized applications from the ground up, then the user's credentials would not have been accessible from the public Internet," he said.
"Privilege management software is all about empowering users to do their job. By effectively managing access to the software to specific users, and specific terminals, even if the hackers gained access to the IT staff credentials, they could then only access the relevant software from within the corporate network."
The developers of DreamHost, pictured below, only meant well by providing “excessive user rights.”

DreamHost states on their site, “Our technology is built by some of the industry’s most clever developers on stable systems that come together to create one amazing user experience. Designed to be easy-to-use, everything at DreamHost is built with the customer in mind.”
Just recently, Avecto was kind enough to lend TMobile security advice, as well.
Maybe DreamHost will take Avecto’s free advice and build their own enhanced security software.
Want to learn more about the latest in communications and technology? Then be sure to attend ITEXPO East 2012, taking place Jan. 31-Feb. 3 2012, in Miami, FL. ITEXPO (News - Alert) offers an educational program to help corporate decision makers select the right IP-based voice, video, fax and unified communications solutions to improve their operations. It's also where service providers learn how to profitably roll out the services their subscribers are clamoring for – and where resellers can learn about new growth opportunities. For more information on registering for ITEXPO registration click here.
Stay in touch with everything happening at ITEXPO. Follow us on Twitter.