#web security headers
85 related articles
·6 min
Separate Domains vs. Subdomains for Self-Hosted Services? A Deep Dive into Security Isolation Strategies
Deep dive into domain security architecture for self-hosted services: Should services with different exposure levels use separate domains or subdomains? Analysis of subdomain enumeration risks, defense in depth, and practical isolation strategies.
Read more →
·4 min
Strange URL Requests in Your NGINX Logs? Demystifying Automated Scanning Attacks and Defense Methods
Seeing unfamiliar 404 requests and strange URLs in your NGINX logs? This article explains automated scanning attacks—their origins, intent—and provides practical defenses using Fail2ban, CrowdSec, and more.
Read more →
·4 min
Mysterious URL Requests in NGINX Logs? Unmasking Automated Scanning Attacks and How to Defend Against Them
Seeing strange 404 requests and bizarre URLs in your NGINX access logs? Learn what automated scanning attacks are, where they come from, and how to defend with Fail2ban, CrowdSec, and other practical solutions.
Read more →
·2 min
Tally: A Browser-Based Spreadsheet Data Provenance and Verification Tool
Tally is a browser-based spreadsheet verification tool that automatically checks numbers against original sources like PDFs. This article analyzes its core features, technical architecture, and value for financial auditing and data validation.
Read more →
·6 min
Securely Exposing Self-Hosted Services via VPS: Architecture & Practical Guide
Learn how to securely expose self-hosted services via VPS using WireGuard tunnels, Pangolin, and reverse proxies — enabling client-free access to Plex, Immich, and more while hiding your home IP.
Read more →
·4 min
Banquish: A Mac Productivity Tool That Pins Live Web Fragments onto a Canvas
Banquish is a Mac app that clips live web fragments onto a free-form canvas, eliminating tab-switching hell. Combined with AI Agent automation, it creates personalized information dashboards.
Read more →
·3 min
Building Your Own Email Archiving Tool: Breaking Free from Single-Provider Dependency and Reclaiming Data Sovereignty
Learn how to build your own email archiving tool using Maildir format and metadata separation to break free from Gmail/Outlook dependency and reclaim data sovereignty.
Read more →
·2 min
Linkwarden 2.16 Released: The Permanent Archiving Powerhouse for Open-Source Bookmark Management
Linkwarden 2.16 released with major Web and mobile updates. This open-source collaborative bookmark manager supports permanent link snapshots and self-hosting, adding self-signed cert support, quick search, and modern UI.
Read more →
·3 min
Self-Hosting a GIF Server: A Complete Guide to Tenor Alternatives
A detailed guide on self-hosting a GIF server as a Tenor alternative, covering image hosting, searchable GIF management systems, and Discord Bot integration.
Read more →
·3 min
What Happens After You Click a Link? A Complete Technical Breakdown
From DNS resolution, TCP handshake, and TLS encryption to the Blink rendering engine — a detailed breakdown of what happens after you click a link.
Read more →
·3 min
Rusty HLP Viewer: A Cross-Platform Tool for Natively Opening Legacy HLP Help Files
Rusty HLP Viewer is the first open-source tool to natively open Windows HLP help files. Built in Rust, it runs on Windows, Linux, and macOS without format conversion.
Read more →
·4 min
Building Self-Hosted Tunnels Under Extreme Censorship: A Layered Architecture with VLESS Reality
Deep analysis of building layered tunnel architectures using VLESS+Reality to evade DPI and domestic relays with whitelisted IPs to bypass geographic blocking in extreme censorship environments.
Read more →
·8 min
Quick Start with SpringBoot for Beginners: From a Java Project to a Real Enterprise Application
Discover why beginners study SpringBoot for six months without getting started. Learn the 'focus on the big' methodology, and evolve a simple Java project step by step into a runnable enterprise application with IDEA.
Read more →
·8 min
Quick Start with SpringBoot from Scratch: From Java Projects to Enterprise Application Practice
Discover why beginners study SpringBoot for six months without getting started. Learn the 'focus on the big picture' methodology and evolve a simple Java project into a runnable enterprise-level SpringBoot application step by step.
Read more →
·3 min
AI-Assisted GeeTest Four-Image CAPTCHA Reverse Engineering: A Complete Efficiency Guide
A complete walkthrough of AI-assisted GeeTest four-image CAPTCHA reverse engineering: from capturing the w parameter to AI analyzing obfuscated code and generating runnable scripts in minutes.
Read more →
·2 min
WebMCP: The New Standard for AI Agents to Precisely Interact with Web Pages
WebMCP is a proposed web standard that lets pages proactively expose tool interfaces to AI agents via declarative and imperative APIs, eliminating browser automation guesswork. Now in Chrome 149 Origin Trial.
Read more →
·3 min
AI-Accelerated Reverse Engineering: Cracking SM2/SM4 Encrypted Freelance Jobs in 30 Minutes
Real freelance case study: how to use DeepSeek and LLMs to reverse-engineer SM2/SM4 encrypted API parameters in 30 minutes, covering anti-debug bypass, call stack backtrace, and AI-assisted deobfuscation.
Read more →
·3 min
Build a Flask Visual Database Query System in 20 Minutes with Trae
Learn how to use Trae, ByteDance's free AI coding tool, to build a Flask-based visual database query system (EasyQuery) in just 20 minutes. Full walkthrough included.
Read more →
·3 min
AI-Powered Python Reverse Engineering: A Full Retrospective on Using LLMs to Accelerate the Workflow
A real-world retrospective on AI-assisted Python reverse engineering: from JS obfuscation tracing and SM2/SM4 key extraction to generating decryption code with DeepSeek. An honest assessment of LLM value and legal risks.
Read more →
·4 min
AI Agents Automating JS Reverse Engineering: A Deep Dive into the New Paradigm for Web Scraping
AI agents are revolutionizing JS reverse engineering. This deep dive covers built-in tool chains, automation modes, prompt engineering for e-commerce, and full pipeline automation from parameter extraction to database storage.
Read more →