A limit with no feedback means a well-behaved client cannot behave well — it finds out by being refused, and its only strategy is to retry. Retry-After is…
A secret in an environment variable is visible in docker inspect, in the process environment, and in any crash dump or error page that prints the environment. The…
A published container port is reachable from the internet regardless of what UFW says, because Docker inserts its rules ahead of the chain UFW manages. Binding to the…
dispatch(function () { … }) is convenient and works by serialising the closure with a signature, which has consequences worth knowing before it is used anywhere important. The…
Authenticating a script against the REST API means either cookies and a nonce, which needs a browser, or basic auth over a plugin, which means a real password…
A predictable temporary path in /tmp is a symlink attack and a collision between two concurrent runs, and both are avoided by the same three lines. Registering the…
19.03 made rootless mode usable, and it is worth knowing what it costs before installing it on a machine that matters. The security gain is real and specific:…
5.2 catches a fatal error during a plugin load, deactivates the plugin, and emails a recovery link to the administration email address — which on most sites is…
10.4 changed the default authentication for the root account to unix_socket, so an upgrade produces a root that cannot log in with a password and a lot of…