DNS, encryption, MFA, threat modelling
A new cloud VM is a public IP with a login prompt on it. The ten minutes that turn it into a server, in the order that matters: provider firewall, SSH keys, ufw, fail2ban, updates, then a check from outside.
The First Ten Minutes on a New Cloud VM: Firewall, NSG, Keys, Then Everything Else Read More »
Everybody in IT can define least privilege. Give every identity the minimum access needed to do its job, and no more. It appears in every security policy, every framework, and every interview answer. Almost nobody implements it properly. That is not because the principle is hard to understand. It is because the principle is free
Least Privilege in Practice: Standing Access, Scope and Just-in-Time Read More »
This is the practical page. If you want the argument about why this work is never finished, that is a separate piece. This one is just the list, ordered by risk rather than by product area, so you can work through it. It is deliberately short. There are longer guides than this and most of
The Permissions Work to Do Before You Deploy Microsoft 365 Copilot Read More »
Every organisation has a joiners, movers and leavers process. Almost none of them run all three legs. The joiner leg gets done well, because somebody is standing in reception on Monday morning unable to work, and that failure is loud, immediate and embarrassing. The leaver leg gets done adequately, because HR chases it, because there
Joiners, Movers and Leavers: Why Movers Break Your Permission Model Read More »
Every competent person running a Microsoft estate already knows the permissions are wrong. They do not need a tool to tell them that. Ask anyone who has administered SharePoint for more than a couple of years whether there is content in the tenant reachable by people who have no business reaching it, and you will
Agent Access and the Permissions You Forgot You Granted Read More »
Twenty common SSH errors on Ubuntu with diagnoses and fixes. Connection refused, permission denied, host key verification failed, and the rest. Listicle referen
20 Common SSH Errors on Ubuntu (and How to Fix Each One) Read More »
SSH tunneling on Ubuntu explained with worked examples. Local forwards (-L), remote forwards (-R), dynamic SOCKS proxies (-D), and when each is the right tool.
SSH Tunneling Explained: Local, Remote, and Dynamic Forwards Read More »
Transfer files over SSH on Ubuntu using SCP, SFTP, and rsync. Worked examples for upload, download, recursive copies, preserving permissions, and when to use wh
SCP and SFTP on Ubuntu: Transfer Files Over SSH (with Examples) Read More »
Install and configure fail2ban for SSH on Ubuntu. Default jail config, custom ban times, whitelisting your own IP, and how to unban yourself when you inevitably
Fail2ban for SSH on Ubuntu: Setup, Tuning, and the Lockout Trap Read More »
Eight SSH server settings that close the brute-force vector. Disable password auth, restrict users, change the port, set MaxAuthTries, and more. Tested on Ubunt
SSH Server Hardening: 8 Settings That Stop Brute-Force Logins Read More »
