Tag: security

LinkedIn scans every visitor's installed extensions and sends the data to third parties without consent. Here's what they're looking for, and how to stop it.

Attackers love finding ways to go from www-data to root. Here's how they do it, and more importantly, how you harden your Linux boxes to stop them.

You committed .env.production once. Your database credentials are in git forever. Here's how to use dotenv without shooting yourself.

Claude Code found a Linux vulnerability hidden for 23 years. You can use the same AI code auditing approach to find bugs in your own projects before attackers do.

Stop letting Docker Hub throttle your CI/CD. Run Harbor for RBAC, Trivy scanning, image replication, and a real UI, on infrastructure you control.

TLS 1.3 explained without the PhD: faster handshakes, better ciphers, and how to actually configure Nginx and Caddy to use it.

Apply zero-trust principles to your home lab, network segmentation, VLANs, identity-aware proxies, and Tailscale as the glue.

Cloudflare's free tier WAF is more powerful than most people use. Here's how to actually configure it: rules, rate limits, and all.

Distroless images contain only your app and its runtime, no shell, no package manager, no attack surface. Here's how to build them.

Certificate pinning and HPKP explained: what they are, why HPKP destroyed itself, and modern alternatives like CAA records and Certificate Transparency.

Stop leaking secrets, dependencies, and OS garbage into git. Here are the .gitignore patterns that save you from disaster.

HashiCorp Vault vs Infisical compared: secrets management for DevOps teams, Docker Compose setup, SDK examples, and when the added complexity is worth it.