Security – Page 2 – ITFROMZERO

Development tutorial - IT technology blog

Secure Webhooks in Node.js: HMAC-SHA256 Verification and Proper Retry Handling

By admin July 18, 2026

An unauthenticated webhook is an easy target for forged requests — this article covers how to protect a Node.js endpoint with HMAC-SHA256, handle idempotency to prevent duplicate processing on retries, and implement exponential backoff when calling downstream services. Includes complete working code and curl commands to test immediately.

Docker

Docker Scout: A ‘Magnifying Glass’ for Security Vulnerabilities and How to Patch Images from CLI to CI/CD

By admin July 18, 2026

Learn how to use Docker Scout to scan for security vulnerabilities, patch critical CVEs, and automate testing with GitHub Actions to protect your images.

Development

Implementing ABAC with Open Policy Agent (OPA) and Node.js for Complex Microservices Systems

By admin July 17, 2026

When RBAC is no longer sufficient for complex authorization logic in Microservices, Open Policy Agent (OPA) and the ABAC model offer a practical solution. This post shares production experience with Node.js, Rego policies, and how to integrate OPA into Express middleware.

Network

Mastering Your Local Network with NetAlertX: Say Goodbye to Wi-Fi ‘Leechers’ and IP Conflicts

By admin July 17, 2026

NetAlertX is a powerful LAN monitoring tool that helps detect unknown devices and sends instant Telegram alerts. Check out this detailed Docker setup guide.

Docker

Securing Docker Containers with Authentik Forward Auth: Add SSO and MFA in 10 Minutes

By admin July 15, 2026

Turn insecure Docker applications into a secure system with SSO and MFA by using Authentik as Forward Auth via Traefik.

MySQL

Connecting to MySQL with PHP PDO: Absolute Security with Prepared Statements and Transactions

By admin July 11, 2026

Switching from mysqli to PDO is a vital step for web security. Learn to use Prepared Statements to prevent SQL Injection and Transactions to protect data in PHP.

MySQL

Secure phpMyAdmin Installation on Linux: Authentication, IP Restrictions, and Nginx Reverse Proxy

By admin July 8, 2026

A practical guide to installing and securing phpMyAdmin on Linux: combining HTTP Basic Auth, IP whitelisting, and deployment behind an Nginx Reverse Proxy. Includes fail2ban and rate limiting configuration to prevent brute-force attacks.

Database

PostgreSQL Anonymizer: The Ultimate Trick to Mask Production Data for Staging Without PII Leaks

By admin July 2, 2026

No more worrying about PII leaks during Production dumps. A detailed guide on using PostgreSQL Anonymizer to automatically anonymize emails and phone numbers for Staging/Dev.

Git

Secure Git Credentials Management on Linux with Git Credential Manager and libsecret: Auto-save GitHub/GitLab Tokens

By admin June 26, 2026

Compare four methods for storing Git credentials on Linux: store, cache, libsecret, and Git Credential Manager. Practical setup guide based on six months of real-world experience — choose the right approach for your desktop or server environment.

Security

Gophish: Build Your Own Phishing Simulation System for Internal Security Testing and Training on Linux

By admin June 24, 2026

Gophish is an open-source tool that lets you run internal phishing simulations without paying for an expensive external service. This guide covers installation, end-to-end campaign configuration, and how to analyze results to genuinely improve your team's security awareness.