• How to Defend Against Brute-Force and DoS Attacks with Fail2ban, Nginx limit_req, and iptables

  In this tutorial, I’ll explain how to protect your public-facing Linux server and Nginx web server from common threats, including brute-force and DoS attacks.

• Is Getting AWS Solutions Architect Associate Certification Worth It?

  If you are a full-time Software Engineer, there's no strong need to pursue this certification.

• DevSecOps

  My Notes about DevSecOps

• AWS Secrets Manager

  Explanation about AWS Secrets Manager with example code.

• Envelope Encryption

  Envelope encryption is the practice of encrypting plaintext data with a data key, and then encrypting the data key under another key.

• Tutorial - "su username vs su - username" - A Security Perspective

  The main difference between `su username` and `su - username` lies in the environment variables that are loaded when switching to the specified user.

• Subdomain Hijacking

  My dormant subdomain was recently hijacked, redirecting it to a online gamble registration page.