#security

not gonna lie this is driving me nuts from experience: Im reconsidering how i store passwords. Right now i use a hosted password manaegr, but Ive been running a home server for a while and self hosting a compatible…

guys pls help i self host a handful of apps in containers. Most of the images i use run as root inside teh container by default. i keep reading that this is a bad practice, but also that containers provide isolation…

say ur frontend sends fetch(url, { method: "POST", headers: { "Content Type": "application/json" }, credentials: "include" }) to an API on a different origin, and the browser blocks it. GETs are fine. The API does set…

hmmmm ok well. our small team has API keys and database passwords scattered around: some in CI variables, some in .env files on servers, and (Im embarrassed to say) a couple committed to a private repo at some point.…