Tag: security

All the articles with the tag "security".

• Keeping secrets out of Git

  14 Oct, 2026

  A short checklist for keeping secrets out of git — why a committed secret is already compromised, the .gitignore patterns to add, where to state the policy (README, AGENTS.md), and three commands to verify nothing is hiding; with a visual summary infographic

• Encrypting Linux: from a hack 20+ years ago to firewalls, LUKS and Veracrypt

  11 Oct, 2026

  A personal Linux security story — how a break-in 20+ years ago pushed me from detecting tampering (tripwire) to preventing it: firewall first, then LUKS full-disk encryption, Veracrypt USB volumes, the threat model and its honest limits, and a daily rsync backup between two encrypted disks

• Anatomy of a Malicious GitHub Invite — The Brisova Build-Time Payload

  29 Sep, 2026

  Anatomy of a malicious GitHub repo invite: an obfuscated Tailwind/PostCSS plugin that runs npm install sql.js socket.io-client form-data axios at build time and loads a C2/credential-stealer toolset — static and sandboxed dynamic analysis, a zero-trust handling strategy, and full IoCs

• Happy Birthday, Linux — My Journey from AIX to Arch

  28 Aug, 2026

  A 35-year personal journey with Linux — from AIX at IBM and getting hacked, to the security habit it forged, the distro years ending at Arch, and every machine now Arch Linux