HTN: Hen's Teeth Network Hen’s Teeth Network Blog

Archive for 2009

What?! No SLA?!

Filed under: Hosting — Art Zemon on June 12, 2009

We are occasionally asked why Hen’s Teeth Network does not offer a Service Level Agreement or “SLA” on our hosting products. We do not offer an SLA for two reasons:

  1. If your web site is down, the cost of hosting and the monetary credit you receive under most SLA’s is an insignificant portion of the lost revenue.
  2. Until you move into the marketplace for true high availability computing, the SLA’s offered by most hosting companies have so many exceptions that they are worthless.

In lieu of an SLA, we offer a 100% satisfaction guarantee.

Hen’s Teeth Network is a gold level reseller of Verio’s web hosting products. We have been hosting exclusively with Verio since 2002, have been extremely pleased with the service, and recommend nothing else for our clients. I think that Verio’s SLA is typical of the industry so I will use it as an example. Were we to offer an SLA, it would follow this one exactly.

First, the numbers: There are 730.5 hours in an average month so the maximum downtime is calculated from that figure.

  • 99.9 to 100% availability – maximum of 0:43 downtime – 0% credit
  • 98% to 99.8% – 14:36 downtime – 10% credit
  • 95% to 97.9% – 36:31 (1.5 days) downtime – 20% credit
  • 90% to 94.9% – 73:03 (3 days) downtime – 50% credit
  • 89.9% or below – 100% credit

If the machine crashes and Verio reboots it and runs fsck to clean up the file system and it is back in 40 minutes (a very reasonable expectation), you get nothing. If it takes longer to reboot, up to 14 hours, which is more than a full business day, you get a whopping 10% credit.

Let’s take that a step further and look at two typical payment scenarios. Many of our clients use our Signature hosting accounts which cost $19 per month. Would anyone be served if we credited their account, or sent them a check, for $1.90? Some of our clients use Managed Private Servers (dedicated servers) which cost $325 per month. Were we to send them $32.50, would it even begin to make up for the lost business of being down for a business day?

Second, the exceptions: Verio’s SLA excludes (and this is typical of the industry), “scheduled maintenance and emergency maintenance and upgrades” and “circumstances beyond Verio’s reasonable control including… attacks or hackers….” In other words, if the downtime is caused by “maintenance,” even if the maintenance takes much longer than expected and runs from the middle-of-the-night-maintenance-window into the following business day, it doesn’t count. More to the point, if the downtime is caused by hackers, it doesn’t count. This hacker exclusion means that if your web site is infested with malware and becomes unusable; or if some miscreant launches a DOS (denial-of-service) attack against another site hosted on the same physical machine as hosts your own site, and your site becomes unusable, it doesn’t count.

In the 15 years that I have been hosting web sites in various capacities, downtime is virtually never caused by the sorts of things covered by SLA’s. They offer a false sense of security.

In the seven years that I have been hosting with Verio, the reliability has been outstanding. Irrespective of the SLA and the exclusions, our clients’ web sites and email have simply “been there” when needed. I have every expectation that that will continue to be true. Exceptional reliability is one of the key reasons why I selected Verio as our hosting provider.

Share

Google Base Data Feeds and Profits Plus

Filed under: This & That — Candy Zemon on June 11, 2009

Hen’s Teeth Network created a bundle of features called Profits Plus that works with PDG Commerce. The sitemap module includes support for both Google Sitemap and Google Base Data Feed. As Google changes the attributes it both requires and offers as optional, Profits Plus is updated to keep in sync. Version 3.2.5 is the most recent Profits Plus iteration. The latest changes to the Profits Plus sitemap module include both mandatory and optional attributes.

The attribute “condition”, formerly optional, has been made mandatory. There are three values you can use: new, used, or refurbished.

The attribute “product type” is newly supported as an optional field, though the Google Base reports are flagging it with warnings if it is left blank. The value to use here is driven by Google’s product taxonomy.

It is clear that merchants find it valuable to feed data about their products directly into Google using Google Base data feeds and that Google is interested in expanding the breadth and depth of information it has about a store and its products so as to offer more focused search results. With Profits Plus you can be assured that as Google changes what it wants to see, your store’s products can continue to be represented in Google Shopping Search.

Share

Effortless PDG Commerce Evaluations

Filed under: E-Commerce,Hosting — Art Zemon on June 9, 2009

Have you wanted to try the latest generation e-commerce software but been put off by the hassle of downloading, installing, and configuring the software? Would you like to see how easy it is to run a PCI PA-DSS certified on-line store?

We are pleased to announce that you can now evaluate your own copy of PDG Commerce without any installation or configuration hassles, even if you do not have a hosting account. Just fill out the very short PDG Commerce evaluation form and, within minutes, you will have your own copy of PDG Commerce 5 running on your own virtual private server.

Your evaluation will run for 30 days and costs nothing. During this period, PDG Commerce is fully functional with no limits whatsoever.

PDG Software offers full tech support for PDG Commerce during the evaluation.

Hen’s Teeth Network offers full tech support for your hosting account during the evaluation.

Get started now: Order your free 30-day PDG Commerce evaluation.

Share

June Newsletter

Filed under: Newsletters — Candy Zemon on June 5, 2009

Summer Buzz

What’s Up with Upgrades?
Or why should I bother?

Some of us view announcements of software upgrades with joy – there will be great new features to learn how to use. Some of us view such announcements as an opportunity to be inconvenienced and to re-learn something that was working just fine. And, unless the upgrade is one you are willing and able to do yourself, there is usually a fee to have the software upgrade done for you.

While acknowledging that there may be re-learning to do and that there may be some inconvenience and/or fee involved in the process, software updates are VERY GOOD THINGS. In addition to new features, upgrades address security vulnerabilities and fix bugs that have been reported. Should you decide not to upgrade software on your site, and then have problems that need our help, our first step will usually be to bring you up to the latest version of the software.

Even update-phobics have become used to the idea of downloading the latest version of the browser or word processing software or operating system they use. It is generally very easy to do and the software itself tells you when an upgrade is available. In fact, in many cases, you can turn on automated updates. This is particularly true with Firefox, Chrome, QuickBooks, and Microsoft Office products.

There are two upgrades that we have been talking about. The first is WordPress. Many of you have sites built on or including WordPress. The latest version has a really nice feature. It has an “upgrade now” button that will let you do your own upgrade when future versions are released. This is convenient, easy, and it gives you the power to perform the upgrade yourself if you are comfortable with following directions and being sure that the files are backed up before pushing that “upgrade” button. You will also benefit from security vulnerability patches included in the upgraded code. WordPress is very widely used, which makes it a tempting target for hackers. Keeping your site on the current version helps protect you.

The other upgrade we have spent a lot of time publicizing is PDG Software’s PDG Commerce. Current users of PDG Shopping Cart can upgrade to PDG Commerce Pro Edition. Current users of PDG Commerce version 4 can upgrade to PDG Commerce version 5 (unlimited edition). This upgrade is crucial for anyone who takes credit cards online. By July 2010 anyone taking credit cards online will need to be using PA-DSS (Payment Application Data Security Standard) certified software. PDG Commerce is the first such certified application recommended for new installations. Read more about this on our site.

Summer Upgrade Special

WordPress

We will upgrade your installation of WordPress to the latest version for a flat fee of $65.

PDG Commerce

If you host with HTN and if you have HTN do the Commerce version 5 upgrade, when you upgrade, we will give you a $100 credit on hosting.

If you don’t host with HTN, this might be a great reason to change. You will also almost certainly get better performance for your site with HTN hosting than with your current host.

Call us (866-HENS-NET) or email us (support@hens-teeth.net) to discuss your needs and to schedule your upgrade.

Customer Site News

Jordyn’s Closet is the first HTN customer to upgrade to PDG Commerce version 5. We congratulate Ron Wikso on his decision to upgrade sooner rather than later. The site is in the process of changing templates to take advantage of some of the new features of version 5, including multiple images per product.

HTN recently launched Artists First Music. This site specializes in matching companies seeking music for a commercial or a film or similar needs with tracks from a variety of artists. The magic added to the mix is Richard Feldman’s personal knowledge of the bands and his ability to categorize and retrieve music for particular purposes.

Vitality Unlimited Spa is freshly redesigned. It is based on a WordPress installation and incorporates PDG Shopping Cart. Enjoy the restful feel of this site. Should you be able to take advantage of being in the Saint Louis area, book a massage. Should you not be in the Saint Louis area, you might take advantage of some of their many shippable products to enhance your well-being.

Share

Choosing PCI PA-DSS Certified E-Commerce Software

Filed under: E-Commerce — Art Zemon on June 2, 2009

Several people have asked me for a concise summary of e-commerce software with PCI PA-DSS certification plans. I was surprised to be unable to find such a list so I created one. Feel free to reference my E-Commerce Software PCI PA-DSS Certification Summary as you evaluate e-commerce software for your own (or your clients’) use.

PCI PA-DSS certification is important to e-commerce sites and any other merchant who accepts credit cards. You essentially will not be able to accept credit cards after July 1, 2010 unless your e-commerce software is PCI PA-DSS certified.

For more on PCI, see PCI Compliant E-Commerce.

Share

My Irrational Response to “Just Reboot It”

Filed under: Desktop Technology,Hosting,This & That — Art Zemon on May 29, 2009

I have an irrationally strong, negative reaction when someone is having a problem with a non-Microsoft Windows computer and they suggest, “Oh, just reboot it.” I know that it’s darned unpleasant for the poor folks who catch the brunt of my anger on the subject and, until now, I have not known what was going on or why I got so angry. Sitting here, typing away on a completely unrelated project, I just had one of those Ah ha! moments and it all became clear to me.

I have spent my entire career working to make computers completely reliable for my clients. It has been hard work but usually rewarding for both me and the people who use my computers. Hearing someone say to me, “Oh, just reboot it” is akin to telling me, “I know that you cannot make this computer reliable.” No one who puts their heart into their craft would like to hear that; I know that I don’t.

We have Microsoft Windows to thank for the pervasive attitude that computers are inherently unreliable, that they need to be rebooted frequently, maybe even more than once per day. Until that operating system saw such widespread use, the majority of computers ran quite reliably for months at a time, sometimes years. Now, people who use Mac OS X or Linux on their personal computers take such reliability for granted. Two examples:

  1. I have an old computer sitting in a corner of the basement acting as a file server and a backup machine for other computers on the network. It runs an old version of Linux and I never touch it except to turn it back on after power failures that last longer than the UPS battery lasts. As I write this blog posting, poor neglected “Dumbo” has been up for 273 days.
  2. We run another Linux server as the company phone system, CRM system, and backup server for several workstations. This one is in a real datacenter so it has better power than Dumbo. It has been up for 303 days. What took it down last time? A fire in the datacenter’s power distribution room.

This is the sort of reliability which I expect to deliver to my clients, whether they are paying customers or family members. I will try to tone down my reaction to, “Oh, just reboot it” and hope that, next time you catch yourself rebooting your computer, you might raise your own expectations on reliability.

Share

Hacked! Company Loses 13 Years of Work

Filed under: Hosting — Art Zemon on May 16, 2009

Imagine this: You wake up to find that your web server and your backup server have both been hacked. You have lost all of the data that your company has spent the last 13 years accumulating. Because of poor choices for backups, that just happened to AVSIM.

I have been doing system administration for over 30 years and I can be fanatical about the backups. (Ask any of the folks who work for me how testy I get when their machines are not fully backed up daily.) I have been burned by faulty backups and know the pain. Back in 2001, my laptop was stolen and everything was backed up except my Zemon family genealogy research. It took years to recover from that disaster. My first hard lesson came in 1980 when our PDP-11/70 crashed and I had to fly from Los Angeles to San Jose so that I could use a sister project’s similarly equipped PDP-11/70 to rebuild our boot disk. That was an expensive crash: a dozen people lost use of their computer for three business days.

I chose Verio as our hosting partner for many reasons, one of which is the excellent backups provided with every hosting account.

  1. All of the disk drives are “mirrored,” meaning that if one drive fails, the computer keeps running using the second drive; no data are lost.
  2. Every night, the entire machine is copied to a backup disk and the backup remains available as “read-only” files until the next night when they are overwritten by a new backup. Anyone hosting a web site from us can recover files from these nightly backups for free. I cannot count the number of times these backups have saved the day when the phone rang and the panicked voice on the other end said, “I messed up and deleted a file….”
  3. Every week, the entire machine is copied to tape and two or three weeks’ worth of tapes are kept in a vault. These, too, are accessible by clients though there is a fee to cover the labor of manually retrieving the tape from the vault. These, too, have saved several clients’ butts over the years.

For clients who want more security, we offer an add-on service, Nest Egg Backup for Web Servers, which provides 30 days of backups of every file on the server.

Few other hosting companies can help you if you accidentally delete a file or need to quickly put your web site back to the way it was yesterday. If you don’t know whether your hosting provider protects you, call and ask them.

Update: Scott and Candy just pointed out a problem with the home page of our site which had been there for several weeks without anyone here noticing it. (Who looks at the home page of his own web site?) Using Nest Egg Backup for Web Servers, I quickly restored the missing code from a file which has not been on our server since April 23, almost a month ago.

How important are backups to you? How would you feel if you lost your entire web site could not get it back?

Share

PDG Commerce Version 5 is PCI PA-DSS Certified

Filed under: E-Commerce — Art Zemon on May 14, 2009

Congratulations to PDG Software on the release of PDG Commerce v5 which is PCI PA-DSS certified. Merchants using PDG Commerce v5 for their e-commerce sites can be confident that they meet requirements of the credit card companies and the merchant banks. The remaining requirements can be met by using a PCI compliant hosting account such as one of our Virtual Private Servers.

Visit our web site for more information on (or to purchase) PDG Commerce and PCI compliant e-commerce hosting accounts.

From the press release:

Certification & validation helps ensure the highest degree of security and privacy for merchants operating and consumers shopping at PDG Commerce enabled eCommerce storefronts.

Atlanta, GA (PRWEB) May 14, 2009 — PDG Software, Inc., a leading provider of internet storefront and eCommerce shopping cart solutions, announced today the certification of PDG Commerce Version 5 as a PCI PA-DSS certified payment application. PDG Commerce now becomes the first internet shopping cart and storefront solution currently recommended for new deployments to achieve validation and certification with the Payment Card Industry Standard Security Council’s (PCI SSC) Payment Application Data Security Standards (PA-DSS) program. The PCI PA-DSS program, previously known as the Visa Payment Application Best Practice (PABP) Program, was created to help software vendors develop secure payment applications that do not store prohibited data and to support compliance with the PCI Data Security Standard (PCI DSS).

Share

The Price of PCI Non-compliance

Filed under: E-Commerce — Art Zemon on May 6, 2009

I just talked with a client about bringing his e-commerce site into PCI compliance. His bank zinged him with a $149 fee because the site was not PCI DSS compliant on January 1, 2009 and is charging him an additional $20 per month until it becomes compliant. He is paying $389 this year to avoid PCI compliance! This is, of course, in addition to the risk he endures of potential fines and penalties should a security breach occur on his site.

If your merchant bank is telling you that your store needs to be PCI compliant, money is no longer a reason to delay. The cost running a PCI compliant web site has dropped to about the cost of non-compliance. Furthermore, bringing your site into PCI DSS compliance will enhance the security of your store. It’s a good thing.

See our PCI Management page for information on making your store PCI compliant, including what “PCI compliant” means in this context.

If you want background information on PCI compliance, see our PCI compliance page.

Share

May 2009

Filed under: Newsletters — Candy Zemon on May 4, 2009

Spring Cleaning

A New Coat of Paint
Taking a fresh look at your site

Here in St. Louis, spring is a brief and ambiguous season. Spring is when we need the furnace at night and the air conditioner during the day. Summer is when the air conditioner is never turned off.

Regardless of the climate in your neck of the woods, spring is a good time to take a fresh look at your surroundings and tidy up a bit. And that includes your website. Maybe you have new stock to offer. A slide show might be the ticket. Or perhaps you want to update the design because it’s been awhile or because your competitors have a new look. Or you’d like to add a blog so you can put tips and news out on a regular basis. Maybe searching isn’t quite up to snuff. Perhaps you want to be able to analyze your traffic – Google Analytics is easy to install. Or your inventory of goods or services has changed over the years to the point that some rearrangement of categories is in order. Maybe you would like a portfolio of pictures or video or audio clips to showcase your offerings. Perhaps you would like to add a spot on your site where folks can sign up to receive newsletters or other email from you. If you want to send out newsletters by email like the one you are reading, we suggest you look at Express Email Marketing (under the marketing tools tab).

Whatever the need, give us a call (866-HENS-NET) or send us email to find out what might be involved to get you what you want. Sometimes small efforts can make a huge difference.

Customers in the Spotlight
Cool Features, New Sites

A site we may have mentioned before (and most likely will again) is Doyle & Doyle. They have a user-friendly and technically complex interplay between individual products and jewelry history pages. Try searching for ruby earrings, for instance. Select a pair you like and notice the period of the piece (this pair is Retro). Press that hot-linked term and you will be put on the history page for the Retro period and the piece you were viewing is the piece in focus. On this Retro page you can press a link to see all the inventory for the Retro period. Pretty slick.

We recently launched a WordPress-based site for a really fun industry (making actors fly). It is for the North American Association of Flying Effects Directors and they are having a conference. We like how unlike a blog this site looks.

A completely different look for completely different needs is found on Sea Change‘s site, another WordPress-based site we launched some time ago. In this case, the aim is to put a variety of current media files at the fingertips (and ears) of visitors.

Looking Out for Your Site

Over the next month, we will be surveying customer sites, looking for any infrastructure that is outdated or vulnerable to security issues. If we should find any point of concern for your site, we will be contacting you about the situation and will suggest steps you might want to take.

As always, if you have any questions or concerns about your site, contact us.

Are Your Products in Google Shopping Search?

spacer (1K) Profits Plus, our add-on product for PDG Commerce, is a dynamic, easy way to make sure the answer is Yes.

The newest module in Profits Plus includes the Google sitemap and Google Base data feed. Between them, they assure that your products (and images, prices and links to your store’s product pages) are loaded into Google without you having to worry about whether the bots will crawl all your pages.

We have recently configured the Google sitemap and Google Base data feeds for several sites and the results are pretty impressive. To see how much Google knows about your site, search site:yoursite (for instance, site:pierceandparker.com or site:stampamania.com). What you see for results is the piece that the sitemap influences.

Now go to the “Shopping” link on the top of this results page – you may find it listed under “more” in some browsers. What you see now is the piece that the Google Base data feeds influences. For PierceandParker.com or Stampamania.com you can see their products, complete with image, price, and links to the product page.

If you want results like this for your products, order Profits Plus today.

As a final check, search for some particular product you offer – is your store listed? If you don’t have results like this for your store yet, order Profits Plus and start using its sitemap module. spacer (1K)

May Hosting Special

If your site feels a tad sluggish, now is a great time to move up the hosting family into a VPS (virtual private server). They start at $59/month and give a noticeable speed improvement to large or complex sites, particularly e-commerce sites.

The first 30 days are free for new accounts opened in May.

If you aren’t sure whether a switch will address your needs, call us (866-HENS-NET) to talk about it.

Share
Contact Us | Legal
© Copyright 2001-2011 Hen's Teeth Network, Inc. All Rights Reserved.