Blog
Notes from the field
Practical guides on security, Linux networking, VPNs and cloud infrastructure.
Practical threat modeling for small projects with STRIDE
You do not need a workshop to threat model. Draw the data flows, apply STRIDE to each boundary and write down the mitigations you will actually implement.
Read articleRunning Docker Compose in production on a shared VPS
Lessons from hosting several projects on one VPS: bind ports to localhost, share a proxy network, keep secrets out of the repo and always have a rollback point.
Read articleA strict Content Security Policy without unsafe-inline
How to ship a CSP with script-src 'self' only, what breaks when you remove inline scripts and eval, and how to fix it without weakening the policy.
Read articleHardening SSH on a Linux VPS: the essentials
Key-only authentication, no root login, a drop-in config and Fail2Ban: the small set of changes that removes most of the noise from a public SSH port.
Read articleHow to enable ssh root access in Ubuntu
This is not recommended for security reasons but in some cases can be useful to temporarily enable it Edit the file /etc/ssh/sshd_config
Read articleNetplan – Set a static IP
From Ubuntu 18+ netplan is the embedded configurator tool for the server edition. When there is not carrier, even if correctly set from a syntax perspective in yaml netplan config file, the network interface will not show an IP address.
Read articleOpenVPN Server – AWS EC2
Elastic Cloud Instances are on demand virtual machines with pre-configured OS images. Some types of them are free of charge the first year such as the T2.micro (1vCPU, 1GB of RAM etc.) The first step is to create a AWS account and link a payment method.
Read articleVPN Router (Road Warrior)
A machine in the middle between a VPN server and a Local Network, acting as a client for the VPN server (on the external interface) and as a Router for the Local Network (on the internal interface) is known as “Road Warrior”.
Read article