Security

Yesterday, a critical Linux kernel vulnerability was publicly disclosed — and it’s a bad one. A 731-byte Python script, downloaded and piped directly into the interpreter, is enough to give any unprivileged local user a root shell. No race conditions. No kernel offsets to guess. Just a straight-line exploit that works on every major Linux distribution going back to 2017. If you run Linux servers — especially multi-tenant ones — you need to patch this now....

In my one of my previous posts I covered a process of setting up Wireguard server on Docker. While Wireguard is a great choice for VPN protocol, as it’s known for its reliability, speed and good encryption, they way it handles handshakes is easily detectable and can be blocked by ISP firewalls. Same applies to other well known VPN protocols, such as: OpenVPN, IPsec and L2TP. A number of countries have introduced measures to block VPN protocols which can cause major problems for users who use them to connect office LAN or for whatever other purposes....

In this post I will describe a very practical use case of running a Wireguard VPN server on Docker. This time I will be creating a docker container using docker-compose method. Why use a VPN? VPN services offer several benefits to users. Firstly, they provide enhanced online security by encrypting internet traffic, making it difficult for hackers or third parties to intercept sensitive information. Secondly, VPNs allow users to browse the internet anonymously, protecting their privacy and preventing websites from tracking their online activities....

In recent years, the technology industry has witnessed a remarkable surge in the adoption of containers, with an increasing number of applications and services being ‘containerized.’ Containers, and Docker in particular, have been lauded for their ability to provide unparalleled isolation and security to applications. However, while containers offer substantial benefits, they are not a silver bullet solution to all security challenges. Security considerations It is crucial to understand that the security of a container hinges heavily on its configuration....