Archive for September, 2020

New Export Features

In our previous update (v4.25) we added a host of new data export features. This included the ability to export invoice data to QuickBooks, Sage, Xero and several other popular accountancy packages.

For MIDAS v4.26, we’re adding a couple of additional features to the export capabilities of our booking software.

Export Users

MIDAS is already capable of exporting Booking, Client, Invoice, and Resource data in a range of formats.

For v4.26 we’re now also allowing user data to be exportable.

Exported user data includes all privileges assigned to each account within your MIDAS system.

One piece of advice we offer to help customers keep their MIDAS systems secure is that each user account should only be granted the minimum permissions each individual requires.

For customers with a large number of user accounts, this new export option allows administrators to quickly audit the permissions assigned to every user account.

Refined Client Data Exports

The ongoing global COVID-19 pandemic is forcing organizations to adapt to how they operate. Throughout this period, we’ve been listening closely to our customers feedback.

We recently published an article on 6 ways MIDAS can help your business adjust to COVID-19.

In addition, we’ve been adding new and improved features in v4.25 and v4.26 to further improve how MIDAS can work for your business in these unprecedented times.

One of our customer’s reached out to us as they wanted a way to collate the email addresses of all their clients who had bookings over a certain date range. This was so that they could send out a bulk email to inform them hat their facilities had temporarily closed.

Now, whilst a list of all client’s addresses could be exported by MIDAS, there was no easy way to generate a subset list of clients based upon when their bookings took – or were due to take – place.

We’ve addressed this for v4.26! There’s now the option to export all clients, or just details of those with bookings within a specific date range!

Export Clients With Bookings Within A Specified Date Range
Export Clients With Bookings Within A Specified Date Range

Improved Password Hardening

For MIDAS v4.26 we’re improving the password change process for users, with the introduction of a new “Disallow Known Breached Passwords” admin setting:

Disallow Known Breached Passwords in MIDAS
Disallow Known Breached Passwords

With this setting enabled, whenever a user changes their password MIDAS checks that it doesn’t appear in any known online data breaches.

Have I been Pwned?

This feature utilizes the popular 3rd party “Have I Been Pwned” service. This is a database of more than half a billion passwords which have previously been exposed in various data breaches.

Don’t worry though, your actual password is never sent to the “Have I Been Pwned” service. Here’s how it works;

  1. You enter a desired new password in MIDAS.
  2. MIDAS creates a cryptographic “hash” (SHA-1) of the password you entered. The first five characters of this hash are sent to the Have I Been Pwned service.
  3. If hashes with the same first five characters are found in the Pwned Passwords repository, the Have I Been Pwned service responds with all these hashes.
  4. MIDAS sifts through the received hashes to see if there’s a complete match with the full SHA-1 hash of your new password.
  5. If a match is found, your desired password has appeared in at least one public data breach. MIDAS will then display an alert and ask you to enter a different password.
The Change Password Dialog in MIDAS
The Change Password dialog in MIDAS
Chosen Password appears in other online data breaches
The chosen password isn’t considered secure as it appears in other online data breaches

The new “Disallow Known Breached Passwords” setting in MIDAS will be enabled by default. It can readily be enabled/disabled via MIDAS Admin Options → Manage MIDAS → Security.

We’re passionate about security, and this latest improvement is just one of the ways we help keep your account and MIDAS system secure.

Interested in learning more about security in your MIDAS system? Try these links…