← All tags

Security 🔐

Security 🔐

All my posts about security

10 posts

Practical security posts - hardening, secrets handling, audit trails, network segmentation, and reviewing infrastructure for the obvious mistakes before someone else does. No FUD, no checklists for their own sake.

Introducing ssl-toolkit

Introducing ssl-toolkit

A comprehensive SSL/TLS diagnostic tool built in Rust that I created to replace my ever-growing document of random certificate checking notes.

8 min readTools 🧰

When the Sandworm Came for My Secrets: Lessons from Shai-Hulud 2.0

When the Sandworm Came for My Secrets: Lessons from Shai-Hulud 2.0

How a sophisticated npm supply chain attack via a trojanized kill-port package compromised my development environment, exposing API keys to attacker-controlled repositories - and what I'm doing differently now.

8 min readSecurity 🔐

Azure DevOps Terraform Pipeline  with Checkov & Approvals

Azure DevOps Terraform Pipeline with Checkov & Approvals

Setting up an Azure DevOps pipeline for Terraform deployments with Checkov scans, validation, and manual approval steps.

15 min readTerraform 👨‍💻

Falco by sysdig

Falco by sysdig

Discover Falco by Sysdig, a powerful behavioral security service monitoring system calls.

3 min readLinux 🐧

Update the Kernel on a Digital Ocean droplet

Update the Kernel on a Digital Ocean droplet

Upgrade your Digital Ocean droplet's kernel effortlessly. Discover the steps to ensure smooth kernel updates for enhanced security and performance.

2 min readLinux 🐧

Adding a SSH Key to Azure

Adding a SSH Key to Azure

Enable passwordless sudo on Azure VMs by adding SSH keys via Terraform. Simplify provisioning and management with seamless key configuration.

2 min readAzure ☁️

Digital Ocean Bootstrap

Digital Ocean Bootstrap

Get your CentOS 7 DigitalOcean droplet up and running in no time! Learn how to perform essential tasks for a smooth deployment.

1 min readCloud ⛅️

Fail2Ban on CentOS 7

Fail2Ban on CentOS 7

Protect your CentOS 7 server with fail2ban! Follow my guide to secure your system from unwanted SSH login attempts.

3 min readLinux 🐧

Sysdig

Sysdig

Explore Sysdig, the versatile tool for system-level exploration on Linux, offering insights into server state and activities for troubleshooting and security.

1 min readLinux 🐧