#server security scan
288 related articles
·6 min
qsa.sh: Complete an External Server Security Scan with a Single curl Command
qsa.sh is a minimalist external server security scanning tool. Just run curl qsa.sh to get a port exposure and vulnerability report for your public IP in 30 seconds. Learn its technical architecture and pricing.
Read more →
·3 min
Wails Cross-Platform Compilation in Practice: Current State and Best Practices
Deep dive into Wails cross-platform compilation challenges including CGO dependencies and native WebView limitations, with practical solutions like CI/CD pipelines and container toolchains.
Read more →
·2 min
DuckDisk: A Table-First Open-Source Disk Space Analyzer for Mac
DuckDisk is a free, open-source Mac storage analyzer with a table-first design. It supports local disk, cloud, and SSH remote scanning. Apple-notarized and on the Mac App Store.
Read more →
·3 min
witr: An Open-Source Diagnostic Tool for One-Click Process Origin Tracing
witr (Why Is This Running) is an open-source Go diagnostic tool that traces processes, ports, containers, and files back to their launch source via CLI and TUI modes.
Read more →
·2 min
The Privacy Trap of Noreply Emails: No Reply Doesn't Mean No One's Watching
Exposing the privacy risks behind noreply mailboxes: users unknowingly send IDs, passwords, and sensitive data to unmonitored inboxes. Learn how to protect yourself.
Read more →
·3 min
Eliminating Fake Torrents in Sonarr: Building a Truly Hands-Off Media Library
In-depth analysis of why Sonarr grabs .exe/.scr fake torrents, with practical solutions including size minimums, Release Profile filtering, Prowlarr pre-filtering, and the case for private Trackers vs public indexers.
Read more →
·3 min
The eBay Harassment Scandal Explained: Executive-Directed Cyberstalking and a $56 Million Penalty
Deep analysis of the eBay harassment scandal: executives directed employees to stalk, send threatening packages, and surveil critics, resulting in $56 million in fines and settlements.
Read more →
·4 min
Shai-Hulud Supply Chain Attack: In-Depth Analysis of the Keyv npm Package Compromise and Defense Guide
In-depth analysis of how the Shai-Hulud worm-like supply chain attack compromised Keyv and other popular npm packages, with developer investigation and long-term defense strategies.
Read more →
·3 min
Perplexity MFA Lockout: What to Do When You Can't Recover Your Account
A Perplexity user lost MFA access after a phone reset, faced zero support response, and turned to Reddit. Exploring MFA lockout issues, recovery best practices, and the security-usability balance in AI products.
Read more →
·3 min
Security Analysis of Authentik with Port Forwarding: A Self-Hosted Service Protection Guide
In-depth analysis of Authentik security with port forwarding for self-hosted services, covering NPM reverse proxy architecture, risks, and hardening with CrowdSec, MFA, VPN, and defense in depth.
Read more →
·3 min
AI Hallucinations Fabricate Fake CVE Vulnerabilities: A New Challenge for Security Trust Systems
A fake critical SQLite CVE fabricated by AI hallucination passed official review, exposing weaknesses in vulnerability disclosure. Analysis of impacts and governance strategies.
Read more →
·3 min
Nightcrawler: Deep Dive into an AI Penetration Testing Agent Running Locally on Smartphones
Deep analysis of Nightcrawler, an AI penetration testing agent running entirely on smartphones. Exploring how on-device AI empowers cybersecurity testing, its architecture, use cases, and risks.
Read more →
·2 min
Cursor vs Codex vs Claude: Practical AI Coding Tool Selection in Cross-Platform Development Environments
Comparing Cursor, Codex, and Claude in cross-platform environments through real developer cases, analyzing compatibility with network folders, Windows Server, and enterprise setups to guide practical tool selection.
Read more →
·3 min
Practical Guide to Self-Hosted Security Architecture with Tailscale + Caddy + Authelia
Deep dive into the Tailscale + Caddy + Authelia self-hosted security architecture: traffic flow analysis, design strengths, and common pitfalls for building secure multi-server setups.
Read more →
·3 min
Self-Hosted Access Log Analysis: A Selection Guide for Loki vs ELK vs GoAccess
Compare Grafana Loki, ELK/OpenSearch, and GoAccess for self-hosted access log analysis. Get selection guidance based on resource usage, features, and integration.
Read more →
·4 min
Multi-Purpose Home Server Build Guide: Streaming + AI Inference + App Hosting on One Machine
How to build a $500 multi-purpose home server for Jellyfin streaming, Ollama local AI inference, web app hosting, and Pi-hole ad blocking with dual RTX 3060 GPUs.
Read more →
·2 min
Tokimeter: Open-Source Local Token Usage & Cost Analyzer for AI Coding Tools
Tokimeter is an open-source local tool that unifies token usage and cost analysis across Claude, Cursor, Codex, and more AI coding tools—no account needed, data never leaves your machine.
Read more →
·6 min
Separate Domains vs. Subdomains for Self-Hosted Services? A Deep Dive into Security Isolation Strategies
Deep dive into domain security architecture for self-hosted services: Should services with different exposure levels use separate domains or subdomains? Analysis of subdomain enumeration risks, defense in depth, and practical isolation strategies.
Read more →
·3 min
Ollama + Qwen-Agent: Building a Local Private AI Assistant — From Deployment to Security Best Practices
A complete guide to building a local private AI assistant with Ollama and Qwen-Agent. Covers RAG knowledge integration, voice interaction, and permission isolation for a secure local AI Agent architecture.
Read more →
·3 min
ESP32-Bit-Pirate: An ESP32-Based Open-Source Multi-Protocol Hardware Debugging Tool
ESP32-Bit-Pirate is an open-source hardware hacking tool based on ESP32, supporting UART, SPI, I2C, 1-Wire protocols with a web CLI for zero-install cross-platform debugging at just a few dollars.
Read more →