Security news, CVEs, hardening guides and much more security related topics will be found here.
Spotlight
The name server addresses 8.8.8.8 and 8.8.4.4 are widely known and used. But, is it a good idea to send basically every web request to google first? What are proper alternatives for public DNS servers? Preferably, with some security and privacy in mind?
Development
How do you prove that the last commit was really made by you? How to audit if your contributors are really themselves and not somebody with stolen account data? And as a user, how can you validate that code is coming from a trusted source, when it is just downloaded from the internet?
Ansible
I have an Ansible playbook and want to set a password for my brand-new MariaDB instance. Do I need a secret management system like Hashicorp Vault, Bitwarden or something else like gopass?
Podman
The world of containers consists of images, which are made out of layers. Normally, everybody with access to the image can investigate it, check out what's in there and how it works. Encrypting your images can prevent others to see the content of your images, even if they get access to it.
Security
In the last part of this article, we installed GPG and created our first keys. For this part, let's have a look at sub-keys and renews. Afterward, you should be set up to use GPG for upcoming tasks like container image encryption, Git commit signing or E-Mail signatures.
Security
After setting up the framework for our security series, we will finally have a look at the first security improvements. What can we do, to avoid that somebody physically compromises our hardware? And what does this even mean?
Security
The world is full of signing and encryption methods. There is one, that is especially useful in Open Source software. GPG can be used to sign mails, Git commits, container image encryption and much more. Let's set it up!
Security
I did some polls and surveys recently, which indicated that security and hardening might be important issues for some of you. This article marks the start of a series about these topics.
Spotlight
There was a time when the internet was young, full of enthusiastic people that wanted to connect others. We became the product. Our data is used to sell ad-placements. Are there alternatives?
Podman
Podman is an awesome tool to build, manage and share container workloads. Sometimes you also need to store a password for your container or manage secret tokens. With Podman 3.1.0 a feature was released that helps to manage container secrets with Podman.