security
115 posts found
Why Docker Bypasses UFW Rules (And How to Fix It)
Docker manipulates iptables FORWARD chains directly, bypassing UFW INPUT rules. Learn why container ports leak to the public internet and how to secure them.
Masscan vs bgscan: Raw Socket Speed vs Modular Protocol Inspection
Comparing raw socket throughput against modular banner extraction for network reconnaissance workflows.
Why Your OpenWrt Transparent Proxy Leaks Packets
A routing policy collision caused my OpenWrt proxy to leak traffic. The fix required explicit IP rule priorities and unreachable fallback rules to prevent unmar…
Zero-Trust Tunnels: Rathole Setup for Secure Edge Access
A technical guide to configuring Rathole Noise-protocol tunnels for NAT traversal without exposing incoming local ports.
Mapping AI Agent Skills to MITRE ATT&CK Frameworks
An interview on structuring autonomous AI agent skills with MITRE ATT&CK and NIST CSF for safer automated defensive operations.
Why Entropy Failures Haunt Self-Hosted Cryptography
A practical analysis of entropy exhaustion, kernel RNG validation on Linux nodes, and defensive key generation patterns.
Self-Hosted DNS-over-HTTPS: A Practical Setup Guide
Set up DNS-over-HTTPS on your own server to encrypt DNS queries and prevent ISP snooping. A five-step guide covering configuration, testing, and hardening.
Why AI Agents Will Shrink Their Context Windows
AI agents are drowning in their own context. The future belongs to compression, not expansion — and it changes how we build self-hosted AI infrastructure.
Telegram Proxy Management Done Right in Rust
How a Rust-based Telegram proxy manager solved the config chaos I was dealing with across multiple servers and networks.
Claude Watch: VPN-Aware Monitoring for AI Coding Agents on macOS
How a macOS monitor watches your Claude usage and enforces VPN policies automatically, keeping your AI coding sessions private and controlled.