{"id":1486,"date":"2013-06-07T10:48:49","date_gmt":"2013-06-07T14:48:49","guid":{"rendered":"http:\/\/blog.funio.com\/en\/?p=1486"},"modified":"2013-07-11T11:44:50","modified_gmt":"2013-07-11T15:44:50","slug":"reinforced-security-interview-with-jean-francois","status":"publish","type":"post","link":"https:\/\/blog.funio.com\/en\/2013\/06\/reinforced-security-interview-with-jean-francois\/","title":{"rendered":"Reinforced Security: Interview with Jean-Fran\u00e7ois"},"content":{"rendered":"

The Funio staff, for the most part accomplished geeks and passionate about technologies, keep track of the latests developments in web hosting. Quicker than others, they inform themselves through their passions and interests what could make the Funio experience even more unique.<\/p>\n

In the past few weeks, Jean-Fran\u00e7ois Chevrette, our Tech Lead, has been working on reinforcing the security of your web services. Whether it be the recent addition of the CageFS<\/a> module, the update of the ModSecurity<\/a> application or the server kernels<\/a>, there are numerous reasons why Jean-Fran\u00e7ois could take some of his time to share with us the reasons behind these recent updates offered to our Funio community.<\/p>\n

<\/p>\n

Exclusive Interview with a Funio Specialist<\/h2>\n

First of all, thank you for taking the time to talk to us. Before we get into things, can\u00a0 you clarify your title, which is quite impressive but rather obscure. What does a Tech Lead do concretely?<\/strong><\/p>\n

Within the Funio team, I make sure that our customer’s infrastructures remain functional, secure and on the “avant-garde”. Therefore I manage our technologies and put into application over 10 years of experience in IT and internet server hosting.<\/p>\n

We all know that security is crucial and central to the web industry. There has been a lot of activity towards the improvement of security on Funio server infrastructures. What motivated these updates?<\/strong><\/p>\n

When it comes to website hosting, security must always be on the forefront. Everyday, new software vulnerabilities are discovered, whether they are open source or commercial. A website usually does not resist very long to hackers.<\/p>\n

Our team believes that security is also our responsibility. Since we are the web hosting experts, it is essential that we help out the customers of the Funio community.<\/p>\n

On one hand, I make sure that our hosting software is regularly updated in order to protect our customers from this vector of attacks. On the other hand, I also have to protect our customers from one another. In other words, if a customer is hosting a vulnerable website or malicious software, it is important to have measures in place to prevent a customer from harming another.<\/p>\n

What are the new changes that have been made? And, more concretely, how does this affect the everyday of a Funio customer?<\/strong><\/p>\n

With my team, we proceeded with three major changes.<\/p>\n

First, the update of the ModSecurity<\/a> module consisted simply into improving the security rules that were in place for several months already. It allows us, among other things, to automatically block attacks on known vulnerabilities, preventing access hacking and blocking SPAM attempts on blog and forum softwares. This last advantage is particularly interesting for our customers since they should see a considerable reduction in the number of unwanted messages on their websites.<\/p>\n

Secondly, the kernel<\/a> update allows us to enforce limitations when it comes to resources consumed by customers. You should know that on every server, multiple customers are being hosted. Abusive usage by a single customer can slow down the entirety of other sites, including those that are not abusing resources. Concretely, the goal is to reduce the impact that an application, a poorly programmed script or even a malicious software, may have on the level of service other customers experience. For example, if a customer attempts – voluntarily or not – to consume all the resources (processor, disk, memory, etc.) of the server, an automated system will restrict him from doing so and prevent slow downs on the entirety of the server.<\/p>\n

Thirdly, the addition of CageFS<\/a> allows the segregation of customer environments so they cannot see each other. I see this like a wall that seals off accounts. The direct impact of this modification reduces considerably the possibilities of attacks or data loss. Before, a poorly programmed website could be subject to hacking that would allow a customer to see the files associated to other sites on the same server. The CageFS technology completely eliminates this vector of attack and considerably increases security.<\/p>\n

It’s all good to restrict sites that require more server resources, but what do you offer\u00a0 as an alternative for someone who requires it?<\/strong><\/p>\n

Since you mention it, in order to provide an alternative to customers to require additional resources, a new service will soon be launched. This new offer will be called Panelbox Private Infrastructure and will be announced very soon. I will let you imagine what this might be!<\/p>\n

We obviously let you some time to relax. However, you probably have multiple projects and new development ideas in mind that we could share with our customers shortly? Do you have any scoops?<\/strong><\/p>\n

On the long term, certain customers mentioned that they would like an improved backup system. I am therefore working on a project that would allow them to have an autonomous management of backups. Additionally, I will soon suggest a simple and flexible solution to manage PHP versions and configurations with more ease.<\/p>\n

Thank you Jean-Fran\u00e7ois!<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

The Funio staff, for the most part accomplished geeks and passionate about technologies, keep track of the latests developments in web hosting. Quicker than others, they inform themselves through their passions and interests what could make the Funio experience even more unique. In the past few weeks, Jean-Fran\u00e7ois Chevrette, our Tech Lead, has been working […]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,25,13],"tags":[6,62],"class_list":["post-1486","post","type-post","status-publish","format-standard","hentry","category-funio","category-infrastructures","category-web-hosting","tag-default","tag-httpmedia-funio-comimageskbblogjfc2-png"],"yoast_head":"\nReinforced Security: Interview with Jean-Fran\u00e7ois - Funio Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.funio.com\/en\/2013\/06\/reinforced-security-interview-with-jean-francois\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Reinforced Security: Interview with Jean-Fran\u00e7ois - Funio Blog\" \/>\n<meta property=\"og:description\" content=\"The Funio staff, for the most part accomplished geeks and passionate about technologies, keep track of the latests developments in web hosting. Quicker than others, they inform themselves through their passions and interests what could make the Funio experience even more unique. In the past few weeks, Jean-Fran\u00e7ois Chevrette, our Tech Lead, has been working [...]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.funio.com\/en\/2013\/06\/reinforced-security-interview-with-jean-francois\/\" \/>\n<meta property=\"og:site_name\" content=\"Funio Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/FunioHosting\" \/>\n<meta property=\"article:published_time\" content=\"2013-06-07T14:48:49+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2013-07-11T15:44:50+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@funiohosting\" \/>\n<meta name=\"twitter:site\" content=\"@funiohosting\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/2013\\\/06\\\/reinforced-security-interview-with-jean-francois\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/2013\\\/06\\\/reinforced-security-interview-with-jean-francois\\\/\"},\"author\":{\"name\":\"\",\"@id\":\"\"},\"headline\":\"Reinforced Security: Interview with Jean-Fran\u00e7ois\",\"datePublished\":\"2013-06-07T14:48:49+00:00\",\"dateModified\":\"2013-07-11T15:44:50+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/2013\\\/06\\\/reinforced-security-interview-with-jean-francois\\\/\"},\"wordCount\":832,\"commentCount\":0,\"keywords\":[\"Default\",\"http:\\\/\\\/media.funio.com\\\/images\\\/kb\\\/blog\\\/jfc2.png\"],\"articleSection\":[\"Funio\",\"infrastructures\",\"Web Hosting\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/blog.funio.com\\\/en\\\/2013\\\/06\\\/reinforced-security-interview-with-jean-francois\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/2013\\\/06\\\/reinforced-security-interview-with-jean-francois\\\/\",\"url\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/2013\\\/06\\\/reinforced-security-interview-with-jean-francois\\\/\",\"name\":\"Reinforced Security: Interview with Jean-Fran\u00e7ois - Funio Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/#website\"},\"datePublished\":\"2013-06-07T14:48:49+00:00\",\"dateModified\":\"2013-07-11T15:44:50+00:00\",\"author\":{\"@id\":\"\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/2013\\\/06\\\/reinforced-security-interview-with-jean-francois\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/blog.funio.com\\\/en\\\/2013\\\/06\\\/reinforced-security-interview-with-jean-francois\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/2013\\\/06\\\/reinforced-security-interview-with-jean-francois\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Reinforced Security: Interview with Jean-Fran\u00e7ois\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/\",\"name\":\"Funio Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"\",\"url\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/author\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Reinforced Security: Interview with Jean-Fran\u00e7ois - Funio Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.funio.com\/en\/2013\/06\/reinforced-security-interview-with-jean-francois\/","og_locale":"en_US","og_type":"article","og_title":"Reinforced Security: Interview with Jean-Fran\u00e7ois - Funio Blog","og_description":"The Funio staff, for the most part accomplished geeks and passionate about technologies, keep track of the latests developments in web hosting. Quicker than others, they inform themselves through their passions and interests what could make the Funio experience even more unique. In the past few weeks, Jean-Fran\u00e7ois Chevrette, our Tech Lead, has been working [...]","og_url":"https:\/\/blog.funio.com\/en\/2013\/06\/reinforced-security-interview-with-jean-francois\/","og_site_name":"Funio Blog","article_publisher":"https:\/\/www.facebook.com\/FunioHosting","article_published_time":"2013-06-07T14:48:49+00:00","article_modified_time":"2013-07-11T15:44:50+00:00","twitter_card":"summary_large_image","twitter_creator":"@funiohosting","twitter_site":"@funiohosting","twitter_misc":{"Written by":"","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.funio.com\/en\/2013\/06\/reinforced-security-interview-with-jean-francois\/#article","isPartOf":{"@id":"https:\/\/blog.funio.com\/en\/2013\/06\/reinforced-security-interview-with-jean-francois\/"},"author":{"name":"","@id":""},"headline":"Reinforced Security: Interview with Jean-Fran\u00e7ois","datePublished":"2013-06-07T14:48:49+00:00","dateModified":"2013-07-11T15:44:50+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.funio.com\/en\/2013\/06\/reinforced-security-interview-with-jean-francois\/"},"wordCount":832,"commentCount":0,"keywords":["Default","http:\/\/media.funio.com\/images\/kb\/blog\/jfc2.png"],"articleSection":["Funio","infrastructures","Web Hosting"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blog.funio.com\/en\/2013\/06\/reinforced-security-interview-with-jean-francois\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blog.funio.com\/en\/2013\/06\/reinforced-security-interview-with-jean-francois\/","url":"https:\/\/blog.funio.com\/en\/2013\/06\/reinforced-security-interview-with-jean-francois\/","name":"Reinforced Security: Interview with Jean-Fran\u00e7ois - Funio Blog","isPartOf":{"@id":"https:\/\/blog.funio.com\/en\/#website"},"datePublished":"2013-06-07T14:48:49+00:00","dateModified":"2013-07-11T15:44:50+00:00","author":{"@id":""},"breadcrumb":{"@id":"https:\/\/blog.funio.com\/en\/2013\/06\/reinforced-security-interview-with-jean-francois\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.funio.com\/en\/2013\/06\/reinforced-security-interview-with-jean-francois\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/blog.funio.com\/en\/2013\/06\/reinforced-security-interview-with-jean-francois\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.funio.com\/en\/"},{"@type":"ListItem","position":2,"name":"Reinforced Security: Interview with Jean-Fran\u00e7ois"}]},{"@type":"WebSite","@id":"https:\/\/blog.funio.com\/en\/#website","url":"https:\/\/blog.funio.com\/en\/","name":"Funio Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.funio.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"","url":"https:\/\/blog.funio.com\/en\/author\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/posts\/1486","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/comments?post=1486"}],"version-history":[{"count":17,"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/posts\/1486\/revisions"}],"predecessor-version":[{"id":1657,"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/posts\/1486\/revisions\/1657"}],"wp:attachment":[{"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/media?parent=1486"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/categories?post=1486"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/tags?post=1486"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}