CVE-2026-31431: The 9-Year Linux Root Bug
CVE-2026-31431 (copy.fail) lets any local user become root on virtually every Linux system since 2017. Here's what it is, why it matters, and how to fix it.
Tag: linux
All the articles with the tag "linux".
GeForce Now: Cloud Gaming Done Right
GeForce Now figured out what Stadia never did: use games you already own. A Founders tier member's deep dive into the best cloud gaming platform running in 2026.
OpenCanary: Honeypots for Your Home Lab
A honeypot sits quietly on your network pretending to be valuable. Touch it and you've found an intruder. Deploy OpenCanary in Docker, dead simple.
nftables: Modern Linux Firewalling
iptables is being phased out. nftables is faster, cleaner, and already the default on modern Linux. Here's how to actually use it without wanting to quit.
Restic vs Borg vs Kopia: Backups That Actually Deduplicate
rsync is not a backup. Restic, Borg, and Kopia do deduplication, encryption, and incremental snapshots properly. Here's which one fits your home lab and why.
Suricata vs Snort: Network Intrusion Detection That Actually Works
Snort invented network intrusion detection. Suricata multi-threaded its way past it. Here's how to set up real IDS/IPS on your home lab and actually understand what it's telling you.
Sysctl Tuning: The Linux Kernel Settings Nobody Told You About
Linux ships with conservative kernel defaults. These sysctl settings tune your server for networking, memory, and file I/O, with explanations, not just paste-and-pray values.
Falco: Catch Container Attacks at Runtime
Falco watches every syscall your containers make and screams when something sketchy happens. Like someone exec'ing a shell inside your nginx container at 3am.
Cockpit vs Webmin: Web Admin Panels That Don't Make You Cry
Cockpit is the modern systemd-native Linux admin panel. Webmin is the veteran that configures everything. Here's which one should be on your servers, and which shouldn't.
Fail2ban vs CrowdSec: Blocking the Bots Actually Smartly
Fail2ban bans IPs that attack you. CrowdSec bans them before they attack you, using community threat intelligence. Here's how to set up both and why you might want both.
2FA for SSH and sudo via PAM
Adding TOTP to SSH and sudo takes 10 minutes and makes password spray attacks useless. Here's the setup that won't lock you out of your own server.
Systemd Timers vs Cron: Scheduling That Doesn't Suck
Cron has been scheduling your jobs since before you were born. Systemd timers do everything cron does, plus logging, dependencies, and missed-run recovery.