Articles

Photo by Mike Wilson on Unsplash

Photo by Mike Wilson on Unsplash

Pentest your web server with Nikto

Check your web servers for known vulnerabilities.
Lead Image © Olivia, Fotolia.com

Lead Image © Olivia, Fotolia.com

Passkeys eliminate the need for password-based authentication

Passwords are becoming a thing of the past. We look into the basic weaknesses of passwords, explain what passkeys are all about, and assess their practicality.
Photo by Mick Haupt on Unsplash

Photo by Mick Haupt on Unsplash

Security analysis with Security Onion

Security Onion offers a comprehensive security suite for intrusion detection that involves surprisingly little work.
Photo by Silas Baisch on Unsplash

Photo by Silas Baisch on Unsplash

Discover vulnerabilities with Google Tsunami

Google Tsunami security scanner detects errors that typically signal danger and outputs alerts. We look into how you can get the tool up and running and even write the required plugins yourself.
Photo by Jorge Coromina on Unsplash

Photo by Jorge Coromina on Unsplash

Build your own cloud with antMan

Discover the advantages and disadvantages of turning a bare metal system into the core of an antMan cloud and whether the free Community Edition and its limitations will work in your case.
Lead Image © Lucy Baldwin, 123RF.com

Lead Image © Lucy Baldwin, 123RF.com

System temperature as a dimension  of  performance

Sensor tools can provide highly variable data from CPUs, GPUs, and a variety of sources. We look at some tools to verify the temperature of components on diverse hardware.

Package management tools for Windows

Chocolatey and WinGet offer full-fledged package management on Windows, but which is best for your environment?
Photo by Dan Burton on Unsplash

Photo by Dan Burton on Unsplash

CrowdSec crowd security service

Threats can be detected and averted at an early stage with crowd security, in which organizations form a community to take concentrated action against cyberattacks by sharing attack data. We explain how this strategy works with the CrowdSec cloud service.
Lead Image © Kritiya Sumpun, 123RF.com

Lead Image © Kritiya Sumpun, 123RF.com

Verifying your configuration

Automated acceptance testing is a powerful tool for catching problems related to misconfiguration. We'll show you how to implement your own acceptance testing environment with a free tool called goss.
Lead Image © destinacigdem, 123RF.com

Lead Image © destinacigdem, 123RF.com

The end of SHA-1

The SHA-1 cryptographic hash function has been considered insecure for a long time. Some Linux distributions have banned or no longer use it – with some consequences, though.