DevOps Engineer
376 articles published
A likelihood-ordered checklist for tracing "Permission denied" on Linux through mode bits, ownership, ACLs, SELinux, and mount options.
A practical walkthrough of the HTTP response headers that harden a web app, with a real rollout plan for Content-Security-Policy.
A field-tested workflow for finding which process burns your CPU and whether the time is user, system, or iowait.
Most API breaches aren't exotic exploits. They're missing authorization checks on endpoints that already require a login and a valid token.
A practical guide to defending against CSRF with SameSite cookies, synchronizer tokens, and double-submit, plus knowing when you don't need any of it.
A practical guide to hashing passwords, adding MFA, hardening sessions, and avoiding the JWT mistakes that break production auth.
The kernel killed your process to save the box, and the log looks like noise until you know exactly which fields to read.
Load average counts more than CPU demand, so a high number needs a diagnostic path before you reach for a fix.
A practical guide to stopping XSS through contextual output encoding, framework escaping, sanitization, CSP, and Trusted Types.
A working engineer's tour of the OWASP Top 10, each risk paired with the concrete fix that actually closes it in production.
A practical guide to stopping SQL injection with parameterized queries, ORM safety, least privilege, and layered defenses that actually hold up.
A practical method for reading free, top, and ps correctly so you attribute Linux memory to a real cause instead of guessing.
