Tags: #security

nginx 1.28.3 dropped March 24 with six CVEs patched. What each one means and whether you need to care.

Nine flaws in AppArmor let an unprivileged local user reach root. Active on every Ubuntu server by default. Sitting there since 2017.

Running a self-managed VPS means bots will find you within hours. Here's the layered setup I use to sleep well anyway.

You integrated Turnstile, your forms work fine, but the browser console is full of errors and warnings. Here's exactly what each one means.

I traced a growing journal to SSH brute-force bots, found a cloud-init misconfiguration hiding in plain sight, and cleaned it all up. Here's the investigation.