Tag: security

ENV bakes secrets into layers visible in docker history. Use BuildKit --secret, runtime vars, or .env files.

Understand Linux umask: what it is, how 022 and 027 work, calculating file permissions, and why it matters for shared directories and security.

Running as root in containers is a security foot-gun. Learn the USER instruction and numeric UID/GID pattern.

AV vs EDR, traditional antivirus signatures vs behavioral endpoint detection. What each catches, what it misses, and what you actually need.

Certificate pinning locks your app to a specific TLS cert so MITM attackers can't swap in a rogue CA, how it works and when to use it.

regreSSHion (CVE-2024-6387) is a remote code execution bug in OpenSSH, what it is, which versions are affected, and how to patch fast.

Cloudflare Tunnels expose local services to the internet without open ports, secure setup with zero-trust access controls.

Go beyond basic UFW rules, rate limiting, geo-blocking, application profiles, logging, and before.rules tricks for serious firewall hardening.

UFW makes iptables manageable, allow and deny rules, app profiles, default policies, and the 5-minute setup for any new Linux server.

SSH tunnels forward ports over encrypted connections, local forwarding, remote forwarding, and dynamic SOCKS proxy explained.

Create, modify, and delete users and groups on Linux, useradd, usermod, groupadd, sudo access, and /etc/passwd explained.

Disaster recovery for your Linux home lab, tiered backups, a restic script that actually runs, restore drills, and the gotchas that bite at 2 AM.