DNS, encryption, MFA, threat modelling
Eight SSH server settings that close the brute-force vector. Disable password auth, restrict users, change the port, set MaxAuthTries, and more. Tested on Ubunt
SSH Server Hardening: 8 Settings That Stop Brute-Force Logins Read More »
Generate, install and use SSH keys on Ubuntu. Covers Ed25519 vs RSA, key permissions, ssh-copy-id, the authorized_keys file, and the agent.
How to Set Up SSH Key Authentication on Ubuntu (Keygen to Login) Read More »
Step-by-step SSH setup for Ubuntu Server. Covers 22.04, 24.04, and 26.04, including the systemd socket activation change in 24.04 that breaks most older tutorials.
Enable SSH on Ubuntu Server: Complete Setup Guide (22.04, 24.04, 26.04) Read More »
Vaultwarden with Docker Compose (Short Answer) Vaultwarden is a lightweight, self-hosted reimplementation of the Bitwarden server, written in Rust. Default port: the container listens on port 80 internally; map it to any host port you like, or publish nothing and let your reverse proxy reach it over a Docker network. There is no second port
How to Install Vaultwarden with Docker Compose (Bitwarden Self-Hosted) Read More »
This week a global medical technology company had their Microsoft tenant compromised. The attackers didn’t deploy custom malware. They logged into the Intune admin console and used the built-in device management tools to trigger a bulk wipe across the entire managed device fleet. From the field: This is the detection rule I would want in
How to Prevent an Intune Bulk Wipe: Sentinel KQL + Hardening Read More »
The UK, US, Australia, EU and Canada all publish cybersecurity frameworks with the same five controls. If you run a homelab, you already practise all five – not because you studied a framework, but because things break if you don’t.
5 Security Basics Your Homelab Already Teaches You Read More »
