Posted inSecurity
Subresource Integrity (SRI): The ‘Armor’ Against Malware When Using CDNs
Learn how to implement Subresource Integrity (SRI) to protect your website from supply chain attacks when using third-party libraries from CDNs.
Posted inVirtualization
Configuring vTPM 2.0 with swtpm on Proxmox and KVM: The Key to Enabling BitLocker for Virtual Machines
A detailed guide on configuring vTPM 2.0 using swtpm on Proxmox VE and KVM. This solution ensures Windows 11 VMs run smoothly and enables BitLocker disk encryption.
Posted inSecurity
Ansible Vault: Encrypting Secrets in Playbooks and Storing Them Safely in Git
Hardcoding secrets in your Ansible Playbook and committing them to Git is the fastest way to lose a server. This article compares 4 approaches to managing secrets in Ansible — from env vars to HashiCorp Vault — and walks through implementing Ansible Vault step by step: the built-in, free solution that's secure enough for most teams.
Posted inPython
Practical Python Security: Don’t Expose Passwords by Misusing Hashlib
Avoid exposing user passwords due to basic mistakes. Learn how to use hashlib (PBKDF2), secrets, and HMAC in Python for expert-level application security.
Posted inDevelopment
Building Spring Boot 3 & PostgreSQL REST APIs: From ‘Working’ Code to Production-Ready Systems
Level up your backend skills with this professional Spring Boot 3 REST API guide. Focus on JWT security, PostgreSQL, and real-world Docker deployment.
Posted inDevelopment
Building 2FA with Node.js: Don’t Let Passwords Be Your Only Line of Defense
Learn how to build a Two-Factor Authentication (2FA) system using the TOTP standard with Node.js. A detailed guide on using speakeasy and qrcode with real-world security tips.
Posted inSecurity
Library Vulnerability Scanning with OWASP Dependency-Check: Don’t Let It Backfire
Don't let third-party libraries become your project's Achilles' heel. A detailed guide on using OWASP Dependency-Check for vulnerability scanning and CI/CD integration.
Posted inUbuntu
Still Vulnerable After Updating Ubuntu? Use needrestart to Fix It Properly
Is an APT update enough? Learn how to use needrestart to manage service restarts, keeping your Ubuntu server secure without unnecessary reboots.
Posted inSecurity
Installing Endlessh: How to Trap Attack Bots in an Infinite SSH Loop on Linux
Learn how to install Endlessh to create an SSH Tarpit, a technique to trap attack bots in an infinite loop, protecting Linux servers and wasting attacker resources.
Posted inDocker
Docker BuildKit Secrets: Stop Leaking API Keys in Your Image Layers!
Stop exposing API keys via Docker ARG or ENV. Learn how to use BuildKit Secrets to securely pass tokens without leaving traces in your Docker image layers.