https://galhardo.cloud/en/artigos/ Practical articles on security, e-mail, legal notices, websites and direct bookings for hotels, quintas and holiday rentals. en Sun, 08 Nov 2026 00:00:00 GMT https://galhardo.cloud/en/artigos/burlas-booking-com/ https://galhardo.cloud/en/artigos/burlas-booking-com/ Sun, 08 Nov 2026 00:00:00 GMT João Galhardo Security Data Criminals get into a property's Booking.com extranet with stolen passwords, often after a fake Booking.com e-mail persuades a member of staff to paste a command into the reception computer. Once inside, they message guests through Booking's real chat, quoting the correct booking details, and ask them to "re-confirm their card" on a fake page. The defences are within a manager's reach: app-based login codes in Booking's Pulse app, one login per person, a rule that nobody pastes commands a website asks for, and a warning to guests in the confirmation message. https://galhardo.cloud/en/artigos/dmarc-email-hotel/ https://galhardo.cloud/en/artigos/dmarc-email-hotel/ Sun, 08 Nov 2026 00:00:00 GMT João Galhardo Security E-mail Any mail server can write your hotel's address in the From line of an e-mail. A DMARC record set to quarantine or reject tells your guests' mail providers to isolate or refuse those forgeries. In November 2026, 56 of 83 domains of tourist establishments in the eastern Algarve (67%) gave no such instruction. The safe route is to publish DMARC at none, read the reports, fix every service that sends in the hotel's name, and only then move to quarantine and reject. https://galhardo.cloud/en/artigos/avisos-legais-site-alojamento/ https://galhardo.cloud/en/artigos/avisos-legais-site-alojamento/ Sun, 08 Nov 2026 00:00:00 GMT João Galhardo Legal Websites A holiday property's website in the Algarve must link to the electronic Livro de Reclamações (Portugal's official complaints book), name the consumer arbitration centre (CIMAAL), identify the business, give GDPR privacy information and ask for consent before non-essential cookies. Alojamento local (AL) properties must also show their registration number. Any link to the EU's online dispute resolution platform should go, as the platform closed in July 2025. Businesses with 10 or more people that sell stays on their own site should also look at the accessibility law. https://galhardo.cloud/en/artigos/estudo-sites-alojamentos-sotavento-2026/ https://galhardo.cloud/en/artigos/estudo-sites-alojamentos-sotavento-2026/ Sun, 08 Nov 2026 00:00:00 GMT João Galhardo Websites E-mail Legal Data In November 2026 we checked the 109 websites that tourist establishments in the eastern Algarve (Sotavento) list in Portugal's national tourism register, and 15 did not open. On the sites that did, the home page took a median 9.5 seconds to show its main content in Lighthouse's mobile lab test, and 31% showed no link to the Livro de Reclamações, Portugal's official complaints book. Of the 83 e-mail domains, 67% give receiving servers no instruction to stop forged mail. The first fixes (footer notices, a DMARC record, domain auto-renewal) take a few hours.