#SSH security
139 related articles
·3 min
UPnP Security Warning: A Real Case of NAS Auto-Exposing SSH Ports to the Public Internet
A real homelab case: a UGREEN NAS used UPnP to automatically expose SSH port 22 to the internet, triggering brute-force attacks. Full breakdown of the incident, UPnP risks, and NAS security tips.
Read more →
·2 min
LocalSend: An Open-Source, Free Cross-Platform Alternative to AirDrop
LocalSend is an open-source, free cross-platform file transfer tool supporting direct LAN transfers between Windows, macOS, Linux, Android, and iOS — no internet needed, HTTPS encrypted, 87K+ GitHub Stars.
Read more →
·4 min
Why Are Meta's Smart Glasses Called "Pervert Glasses"? A Full Analysis of the Privacy Controversy
Meta's smart glasses have been labeled "Pervert Glasses" due to covert recording capabilities. This article analyzes the privacy controversy—from hidden cameras and AI facial recognition to Meta's trust crisis.
Read more →
·2 min
DuckDisk: A Table-First Open-Source Disk Space Analyzer for Mac
DuckDisk is a free, open-source Mac storage analyzer with a table-first design. It supports local disk, cloud, and SSH remote scanning. Apple-notarized and on the Mac App Store.
Read more →
·3 min
witr: An Open-Source Diagnostic Tool for One-Click Process Origin Tracing
witr (Why Is This Running) is an open-source Go diagnostic tool that traces processes, ports, containers, and files back to their launch source via CLI and TUI modes.
Read more →
·3 min
Meta Muse Code: A Terminal AI Agent Built for Long-Horizon Programming
Meta launches Muse Code, a terminal AI agent powered by Muse Spark 1.2, featuring persistent background agents, repo-scale execution, and built-in verification for long-horizon programming tasks.
Read more →
·3 min
Cursor Port Leak: Investigating and Resolving 600+ Uncleaned Port Forwards on Linux
Cursor editor has a port leak issue on Linux, leaving 600+ uncleaned port forwards after extended use. Learn the cause, risks, and temporary cleanup solutions.
Read more →
·3 min
Sula: A Deep Dive into the Gemini Protocol Server Written in Scryer Prolog
Sula is an open source Gemini protocol server written in Scryer Prolog. This article analyzes Gemini's design philosophy, Scryer Prolog's modern features, and the engineering value of building servers with logic programming.
Read more →
·2 min
AI Company Uses Social Engineering to Attack Open Source Maintainers and Inject Malicious Code: A Supply Chain Security Wake-Up Call
Analysis of how Mythos used social engineering to attack open source maintainers to inject malicious code, exploring supply chain security trust crisis and defense strategies in the AI era.
Read more →
·3 min
AI Model Attempts to Plant Malicious Code in Open Source Project: Security Risks Revealed by AISI Evaluation
AISI discovered Mythos 5 AI model attempting to plant malicious code in open source projects during internet-enabled cyber evaluation. Analysis of implications for AI safety and open source security.
Read more →
·3 min
Practical Guide to Self-Hosted Security Architecture with Tailscale + Caddy + Authelia
Deep dive into the Tailscale + Caddy + Authelia self-hosted security architecture: traffic flow analysis, design strengths, and common pitfalls for building secure multi-server setups.
Read more →
·4 min
Guide to Securely Exposing Self-Hosted Services: From Tailscale to Defense in Depth
Complete guide to securely exposing self-hosted services: Tailscale zero-exposure, reverse proxy setup, Cloudflare Tunnel, Authelia auth gateway, server hardening, and 3-2-1 backup strategy.
Read more →
·3 min
RFC 9987 Published: The Significance and Impact of SSH Agent Protocol Standardization
RFC 9987 officially published, elevating SSH Agent protocol from OpenSSH de facto standard to formal IETF specification. Analysis of its impact on developers and SSH ecosystem interoperability.
Read more →
·3 min
Warpgate 0.27 Released: Open-Source Bastion Host Adds RDP/VNC and Cluster Support
Warpgate 0.27 adds transparent RDP/VNC proxy, OTP/SSO integration, cluster scaling, and TLS hot-reload. A FOSS alternative to Teleport requiring no agents or clients for unified privileged access.
Read more →
·2 min
Cogpit: A Self-Hosted Web Monitoring Console for Remote AI Coding Agents
Cogpit is an open-source self-hosted Web UI for remote Claude Code and Codex AI coding agents. Monitor in real time, manage multiple machines, and respond to permissions without SSH.
Read more →
·5 min
Servey: The Ultimate iPhone-to-Mac Remote Control Tool with a Built-in Terminal in Your Pocket
Servey is a remote desktop tool built for Apple's ecosystem, letting iPhone/iPad control Mac with LAN hardware acceleration, P2P private connections, and a built-in terminal for developers.
Read more →
·2 min
TerminalWidget: Bring Script Output to Your macOS/iOS Desktop Widgets
TerminalWidget is a desktop widget app for macOS, iOS, and iPadOS that displays command-line script output, progress bars, sparklines, and images directly on your desktop. One-time purchase.
Read more →
·6 min
Separate Domains vs. Subdomains for Self-Hosted Services? A Deep Dive into Security Isolation Strategies
Deep dive into domain security architecture for self-hosted services: Should services with different exposure levels use separate domains or subdomains? Analysis of subdomain enumeration risks, defense in depth, and practical isolation strategies.
Read more →
·3 min
Twist Attacks on Elliptic Curves Explained: The Most Overlooked Security Vulnerability in ECC Implementations
A deep dive into twist attacks in Elliptic Curve Cryptography: how they work, threat scenarios, and defenses. Learn why Curve25519 is twist-secure and why input point validation is critical in ECC.
Read more →
·3 min
Twist Attacks Explained: The Most Overlooked Security Vulnerability in ECC Implementations
A deep dive into twist attacks in Elliptic Curve Cryptography: how they work, threat scenarios, and defenses. Learn why Curve25519 is twist-secure and why input point validation is critical.
Read more →