Adding a key to authorized_keys makes key login work. It does not stop password login from also working, so the server is still one weak password away from…
Every hand-rolled password scheme gets the same three things wrong: the algorithm is too fast, the salt is reused or stored badly, and the comparison is not constant…
Three installs, three plugin sets, one person patching them — a security release forgotten on the third site for six weeks. The import order, and what a shared…
A certificate is bought once, installed once, and the diary entry belongs to whoever did it — which survives about as long as their current job. Two years…
PDO’s MySQL driver emulates prepared statements by default. prepare() does not talk to the server; PDO keeps the string, and execute() substitutes the values into it with its…
bash parses an environment variable whose value begins with () { as a function definition, and until last week it carried on executing whatever followed the closing brace.…