Tags: #linux

I'm Team Linux. But pretending it has no weaknesses helps no one. 3 areas Windows still dominates, and why it's actually an economics problem.

Network blips are brief and self-healing. They are also the reason a backup job can run cleanly, log no errors, and leave you with nothing to restore from.

nginx 1.28.3 dropped March 24 with six CVEs patched. What each one means and whether you need to care.

You hardened your systemd service with ProtectHome=yes. Your Go service spawns a subprocess. It crashes with EACCES on a path you never touched.

Nine flaws in AppArmor let an unprivileged local user reach root. Active on every Ubuntu server by default. Sitting there since 2017.

Running a self-managed VPS means bots will find you within hours. Here's the layered setup I use to sleep well anyway.

The systemd options that actually matter for a Go backend and Node.js frontend: unit file anatomy, hardening directives, and the gotchas that burn you.

I traced a growing journal to SSH brute-force bots, found a cloud-init misconfiguration hiding in plain sight, and cleaned it all up. Here's the investigation.