SSHole: A 257-Character Password Can Log You In on Alpine Linux
How a password over 256 characters unlocks password-less accounts on Alpine and other musl Linux systems, and how to fix it.
#security
Posts tagged #security
Node.js Security Checklist for 2026
A practical, copy-paste-friendly checklist covering security headers, rate limiting, password hashing, dependency audits, and supply-chain safety for Node.js apps.
Harden a Fresh VPS in 15 Minutes: SSH Keys, Firewall, Fail2ban and Auto-Updates
A step-by-step checklist to lock down a brand-new Ubuntu or Debian VPS: a non-root user, SSH keys, UFW, Fail2ban and automatic security updates.
How to Allow SSH Login From Only Your IP on a VPS (Without Locking Yourself Out)
Allow SSH from one trusted IP using UFW, firewalld, iptables or sshd_config, plus a safe way to test so you never lock yourself out.
Secrets Management for Small Teams: From .env Files to a Real Vault
A practical path for small teams: lock down .env files, encrypt secrets in git, adopt a managed store, and know when a vault is worth it.
Next.js 16.4.0 Has a Known Security Vulnerability: Here’s How to Fix It
Two critical RCE flaws and a DoS bug hit Next.js 16.4.0. Here’s what they are, whether you’re exposed, and how to upgrade.
