SSH Agent Forwarding: How It Works
Understand SSH agent forwarding security risks. When it's safe (almost never), and better alternatives like ProxyJump for jump hosts.
Tag: security
All the articles with the tag "security".
Stop Putting Passwords in Docker ENV
ENV bakes secrets into layers visible in docker history. Use BuildKit --secret, runtime vars, or .env files.
The umask You've Been Ignoring
Understand Linux umask: what it is, how 022 and 027 work, calculating file permissions, and why it matters for shared directories and security.
Running Docker Containers as Non-Root (And Why You Should)
Running as root in containers is a security foot-gun. Learn the USER instruction and numeric UID/GID pattern.
The Role of Antivirus and Endpoint Detection and Response Systems
AV vs EDR — traditional antivirus signatures vs behavioral endpoint detection. What each catches, what it misses, and what you actually need.
Certificate Pinning: A Secure Connection Guide
Certificate pinning locks your app to a specific TLS cert so MITM attackers can't swap in a rogue CA — how it works and when to use it.
Understanding the regreSSHion Vulnerability in OpenSSH
regreSSHion (CVE-2024-6387) is a remote code execution bug in OpenSSH — what it is, which versions are affected, and how to patch fast.
How to securely deploy Cloudflare Tunnels
Cloudflare Tunnels expose local services to the internet without open ports — secure setup with zero-trust access controls.
Advanced UFW Techniques: Enhancing Firewall Security
Go beyond basic UFW rules — rate limiting, geo-blocking, application profiles, logging, and before.rules tricks for serious firewall hardening.
UFW Basics: Setting Up Your Linux Firewall
UFW makes iptables manageable — allow and deny rules, app profiles, default policies, and the 5-minute setup for any new Linux server.
SSH Tunneling: A Secure Conduit for Your Data
SSH tunnels forward ports over encrypted connections — local forwarding, remote forwarding, and dynamic SOCKS proxy explained.
User and Group Management in Linux
Create, modify, and delete users and groups on Linux — useradd, usermod, groupadd, sudo access, and /etc/passwd explained.