Security – ITFROMZERO – Share tobe shared!

Mastering Firewalld IP Sets on CentOS Stream 9: Block Thousands of IPs Instantly

By admin September 9, 2026

Block thousands of attacking IPs with a single command. A detailed guide on using Firewalld IP Sets on CentOS Stream 9 to optimize security and performance.

Security

Subresource Integrity (SRI): The ‘Armor’ Against Malware When Using CDNs

By admin September 7, 2026

Learn how to implement Subresource Integrity (SRI) to protect your website from supply chain attacks when using third-party libraries from CDNs.

Virtualization

Configuring vTPM 2.0 with swtpm on Proxmox and KVM: The Key to Enabling BitLocker for Virtual Machines

By admin September 5, 2026

A detailed guide on configuring vTPM 2.0 using swtpm on Proxmox VE and KVM. This solution ensures Windows 11 VMs run smoothly and enables BitLocker disk encryption.

Security

Ansible Vault: Encrypting Secrets in Playbooks and Storing Them Safely in Git

By admin September 4, 2026

Hardcoding secrets in your Ansible Playbook and committing them to Git is the fastest way to lose a server. This article compares 4 approaches to managing secrets in Ansible — from env vars to HashiCorp Vault — and walks through implementing Ansible Vault step by step: the built-in, free solution that's secure enough for most teams.

Python

Practical Python Security: Don’t Expose Passwords by Misusing Hashlib

By admin September 4, 2026

Avoid exposing user passwords due to basic mistakes. Learn how to use hashlib (PBKDF2), secrets, and HMAC in Python for expert-level application security.

Development

Building Spring Boot 3 & PostgreSQL REST APIs: From ‘Working’ Code to Production-Ready Systems

By admin September 3, 2026

Level up your backend skills with this professional Spring Boot 3 REST API guide. Focus on JWT security, PostgreSQL, and real-world Docker deployment.

Development

Building 2FA with Node.js: Don’t Let Passwords Be Your Only Line of Defense

By admin September 3, 2026

Learn how to build a Two-Factor Authentication (2FA) system using the TOTP standard with Node.js. A detailed guide on using speakeasy and qrcode with real-world security tips.

Security

Library Vulnerability Scanning with OWASP Dependency-Check: Don’t Let It Backfire

By admin August 30, 2026

Don't let third-party libraries become your project's Achilles' heel. A detailed guide on using OWASP Dependency-Check for vulnerability scanning and CI/CD integration.

Ubuntu

Still Vulnerable After Updating Ubuntu? Use needrestart to Fix It Properly

By admin August 30, 2026

Is an APT update enough? Learn how to use needrestart to manage service restarts, keeping your Ubuntu server secure without unnecessary reboots.

Security

Installing Endlessh: How to Trap Attack Bots in an Infinite SSH Loop on Linux

By admin August 28, 2026

Learn how to install Endlessh to create an SSH Tarpit, a technique to trap attack bots in an infinite loop, protecting Linux servers and wasting attacker resources.