Implementing Argon2id for Credential Storage in PHP
Learn how to implement Argon2id in PHP using password_hash to secure user credentials against database leaks and brute-force attacks.
Loading…
ReadMeFeed / Community knowledge
#security
Real questions. Useful conversations. Find the people who know your stack.
Configuring OpenSSL 3.x to Use Only the Default Provider for TLS Termination
Guide to configure OpenSSL 3.x to load only the default provider for TLS termination, with steps, verification commands, and rollback options.
opensslAutomating Security Updates on Debian Stable with unattended-upgrades
Unlock the power of Debian stable’s unattended-upgrades: automatically pull security patches, fine‑tune origins, test with dry‑runs, and manage reboots—all without manual intervention.
debianUsing ARM64 Pointer Authentication to Harden Return Addresses
Learn how ARMv8.3-A Pointer Authentication (PAC) signs return addresses to detect tampering, how to enable it in your toolchain and kernel, and what trade‑offs to consider.
aarch64Using cPanel’s IP Blocker to Stop Bad Traffic – A Practical Guide
Learn how to use cPanel’s IP Blocker to deny HTTP traffic from malicious IPs, see a concrete example, and understand the trade‑offs of this built‑in firewall feature.
cpanelLimiting Tauri Windows with Capability Scopes: A Practical Engineering Decision
Learn how to restrict which native commands each Tauri window can call by using capability scopes, reducing attack surface while keeping the app functional.
tauriGrafana Architecture: Server-Side Proxy and File-Based Provisioning for Trust Boundaries
Deploy Grafana with server-side proxy and file-based provisioning to keep credentials off the browser, enforce trust boundaries, and manage dashboards as code. Includes operational checks and failure modes.
grafanaUnderstanding Deno's Permission Model: From Zero Trust to Practical CI Workflows
Learn how Deno’s zero‑default permission model works, how to use flags and the Permissions API for gradual privilege granting, and how to lock down CI jobs without sacrificing safety.
SSH Public‑Key Authentication: Secure, Passwordless Remote Access Made Simple
Secure SSH login without passwords: generate an ed25519 key, copy the public key to the server’s authorized_keys, enforce strict permissions, and verify with ssh -v. Avoid common pitfalls like wrong permissions or deprecated algorithms.
ssh