-
Secrets in GitOps history: scan by key name, then rotate
My Kubernetes manifests repo had credentials from its first commit. Why value-shaped scans drown in noise and still miss passwords, how key-name scanning with triage found the real ones, and why rotation, not deletion or history rewrites, is the fix.
-
An MCP server for a private library, gated per user
Building an MCP connector so AI assistants can search and read my library: FastMCP's 421 Host trap, per-user tokens and role-filtered tools, reading long books, and gating restricted collections without regex bypasses.
-
A 20-second power cut, an 8-hour outage: LUKS on a home server
My server lost power at 00:31, came back by itself, then waited 8 h 25 min at a hidden LUKS passphrase prompt. How to prove it from systemd timestamps, triage the cold-boot alert storm, and choose an unattended unlock.
-
Search Console said 'connection error'. My router had banned Googlebot
Search Console reported connection errors while my web logs showed nothing wrong: my router's auto-ban list had caught two genuine Googlebot addresses. How I found it, and how to allowlist verified crawlers safely.
-
One notification relay instead of 40 copies of a token
The same chat-bot token lived in about 40 places in my lab, some in git. A small relay now holds the credentials once; senders carry only a revocable per-sender token and address channels, not platforms.
-
The test that deleted my home folder
To prove a path-traversal bug existed, an AI coding assistant ran the test against the unfixed code on the host, and the bug deleted everything my user could delete in ten seconds. How I found the exact command on the raw disk, and the boring safeguards that now prevent it.
-
Passwords that only fail after a reboot
Long-lived connections and hard-coded default passwords hid a database password rotation until a routine reboot broke two services. Why it happens, how to find the services that are hiding it, and a fail-closed checklist.
-
Every attack here makes others safer
A honeypot, behavioural detection, blocking at the edge and a community that shares every verdict: how one machine near Iași turns attacks into protection for strangers.