self-hosted
24 posts found
BTCPay Server Hot Wallet Attack: What Broke, What to Do, and the Patch Gap Problem
BTCPay Server versions through 2.4.1 are confirmed vulnerable to an attack that drained hot wallets. Here is what the architecture makes possible, how to harden…
Container Runtime Hardening: Ten Controls Against Host Compromise
Default container runtimes favor developer convenience over defensive isolation. Here is a 10-point checklist to lock down Linux container deployments against p…
whoisthat: A Rust TUI VPN Client Backed by a Go/Xray Engine
whoisthat splits a VPN client into two processes: a Rust TUI for the terminal interface and a Go engine driving Xray-core underneath. This guide covers building…
WebCheck: Self-Host Your Website OSINT Instead of Renting It
Website OSINT in one URL: DNS, TLS, headers, WHOIS, tech fingerprint, all passive. Run the WebCheck fork on your own box so targets never leave your network.
VPS Security Baseline: 10-Point Checklist Before You Go Live
A practical pre-flight checklist for hardening a fresh Ubuntu 24.04 VPS before exposing any service to the internet.
Offloading Mixture-of-Experts Models to NVMe Storage
Memory-mapping large MoE parameters directly from SSDs often hits severe latency bottlenecks. Here is why random read IOPS stall sparse expert routing and how t…
Zero-Trust Tunnels: Rathole Setup for Secure Edge Access
A technical guide to configuring Rathole Noise-protocol tunnels for NAT traversal without exposing incoming local ports.
Lazydocker vs Dockge: TUI vs Web Dashboard for Docker Compose Management
A comparative analysis of Lazydocker and Dockge for managing Docker Compose stacks, focusing on security boundaries, resource usage, and workflow efficiency.
OpenLogi: Local-First Rust Alternative to Logitech Options+
A native, local-first alternative to Logitech Options+ written in Rust. No account, no telemetry, direct HID++ communication with your mouse.
Why Entropy Failures Haunt Self-Hosted Cryptography
A practical analysis of entropy exhaustion, kernel RNG validation on Linux nodes, and defensive key generation patterns.