#web application firewall
115 related articles
·3 min
Small Site Besieged by AI Crawlers: Under 100 Images, 266K Crawl Requests
A Piwigo gallery with under 100 images received 266K AI crawler requests in 24 hours. Analysis of why gallery CMS becomes a bot trap and how to defend against it.
Read more →
·3 min
How to Fix AI Tool Error 1076? Root Cause Analysis and Solutions
Getting "Something went wrong 1076" from an AI service? This article analyzes common causes including server overload and session issues, with practical troubleshooting steps to restore normal usage.
Read more →
·4 min
Foundry VTT Public Access Guide: The Right Way to Securely Expose Self-Hosted Services
Learn how to securely expose Foundry VTT to the public internet. Compare port forwarding, Cloudflare Tunnel, and reverse proxy solutions with practical advice on network isolation and layered defense.
Read more →
·3 min
NetBird + Caddy: Remote Access Without Exposing Public Ports
Learn how to use NetBird WireGuard mesh networking with Caddy reverse proxy for homelab remote access without exposing public ports. Covers Split DNS, TLS certificates, and ACL controls.
Read more →
·3 min
AI Agent Jailbreak Incidents: Why Security Boundaries Keep Failing
Deep analysis of AI agent jailbreak and escape incidents, covering prompt injection attacks, permission control failures, and sandbox isolation breakdowns, with practical multi-layer defense strategies.
Read more →
·4 min
Self-Hosted Service Domain Resolution in Practice: A Deep Dive into Split DNS and Tailscale Solutions
A deep dive into domain resolution challenges for self-hosted home servers, covering Split DNS concepts and how Tailscale App Connector enables unified domain access across internal and external networks.
Read more →
·4 min
Frontend Engineer Driven to Homelab by AI: From React Specialist to Full-Stack Self-Rescue
A 7-year frontend engineer, fearing AI-driven job loss, builds a homelab to learn Docker, databases, and networking. A pragmatic roadmap for developers building breadth in the AI era.
Read more →
·4 min
Building Self-Hosted Tunnels Under Extreme Censorship: A Layered Architecture with VLESS Reality
Deep analysis of building layered tunnel architectures using VLESS+Reality to evade DPI and domestic relays with whitelisted IPs to bypass geographic blocking in extreme censorship environments.
Read more →
·6 min
AmneziaVPN Deep Dive: The Open-Source Powerhouse for Self-Hosted, Censorship-Resistant VPN
Deep dive into the AmneziaVPN open-source client: AmneziaWG anti-DPI obfuscation, self-hosted VPS deployment, multi-protocol support, and cross-platform privacy.
Read more →
·6 min
Hands-On with Panel AI On-Premises Deployment: One-Click Enterprise Adoption and Unified Compute Cluster Scheduling
In-depth review of Panel AI v1.1.1: second-level installation, no-public-IP networking, batch compute cluster management. Learn how enterprise AI on-premises deployment barriers are dramatically lowered.
Read more →
·3 min
OWASP Agentic Security Top 10 Deep Dive: Understanding ASI01–ASI10 Risks and Mitigations
A comprehensive breakdown of the OWASP Agentic Security Top 10 framework, covering ASI01–ASI10 risks including goal hijacking, tool misuse, identity abuse, supply chain vulnerabilities, and cascading failures — with practical mitigations for AI agent systems.
Read more →
Claude Hit by Prompt Injection Attacks…
·2 min
Claude Hit by Prompt Injection Attacks: AI Security Blind Spots and a Defense Guide
A viral Hacker News post reveals how prompt injection attacks can trick AI assistants like Claude into leaking user data. Learn how indirect injection works and how to defend against it.
Read more →
WebRTC P2P Local File Transfer Explain…
·2 min
WebRTC P2P Local File Transfer Explained: How It Works, Benefits, and Limitations
A deep dive into WebRTC-based P2P local file transfer: no cloud relay, end-to-end encrypted direct connections via DataChannel. Covers NAT traversal, privacy benefits, large-file challenges, and comparisons with Snapdrop.
Read more →
Smart Proxy: The Key Architecture for …
·3 min
Smart Proxy: The Key Architecture for Running AI Coding Agents Safely and Autonomously
Too much AI permission is risky; too little kills productivity. A smart proxy acts as a controllable middleware layer — intercepting, auditing, and policy-gating AI agent actions in tools like Claude Code and Cursor for safe autonomous operation.
Read more →
·3 min
UPnP Security Warning: A Real Case of NAS Auto-Exposing SSH Ports to the Public Internet
A real homelab case: a UGREEN NAS used UPnP to automatically expose SSH port 22 to the internet, triggering brute-force attacks. Full breakdown of the incident, UPnP risks, and NAS security tips.
Read more →
·3 min
31 Companies Sign Agent Privacy Pact: Industry Self-Regulation Framework Goes into Effect
31 companies sign China's first AI agent privacy pact covering screen-reading authorization, training data restrictions, and payment caps. Plus: domestic LLM tops OpenRouter, Meta's $40B compute bet, and agent commercialization challenges.
Read more →
·3 min
Building a Local AI Environment on Ubuntu with Hyper-V: The Complete 1Panel + OpenCode + Hermes Workflow
Create an Ubuntu 22.04 VM on a Windows host with Hyper-V, then deploy the 1Panel dashboard, OpenCode gateway, and Hermes agent to build a complete local AI Agent runtime. Includes port config and troubleshooting.
Read more →
·4 min
Why Do AI Agents Crash the Moment They Go Live? A Practical Guide to Harness Engineering for Runtime
A deep dive into the Claude Code source code, systematically analyzing the five-layer Harness Engineering architecture: environment, tool, control, memory, and evaluation. Build a stable runtime system for production AI Agents.
Read more →
·4 min
AI Coding Tool Security Governance: How Policy Enforcement Guardrails Ensure Enterprise Compliance
As Claude Code, Cursor, and Codex enter enterprises at scale, policy enforcement guardrails are becoming critical. A deep dive into AI coding tool security governance, cross-platform compliance, and enforcement mechanisms.
Read more →
·6 min
Databricks Agent Framework in Practice: A Guide to ChatAgent Wrapping and Production Deployment
A deep dive into Databricks Agent Framework (Mosaic AI): unify LangGraph/OpenAI agents via ChatAgent, log & evaluate with MLflow, version with Unity Catalog, and deploy Model Serving Endpoints for production AI agents.
Read more →