Most “hopping through bastion” SSH workflows use agent forwarding (ssh -A): the bastion gets temporary access to your local SSH keys via the agent socket, and from there it can SSH onward. It’s convenient, it’s the default in …
The interesting thing about WordPress malware in 2026 is that most of it doesn’t try to hide on disk anymore. Filesystem scanners catch the obvious things — random PHP at webroot, .hph extension shadows, polyglot images. The newer payloads live …
You write a Python script that needs to run every fifteen minutes on your Mac. You add a line to crontab -e, save, walk away. Two days later you check and notice it never ran. The cron file is …
Last week I cleaned a six-site WordPress compromise on one of my OpenLiteSpeed boxes. The most interesting payload was the “DOLLY” mu-plugin family — a credential-harvesting backdoor that hides itself with a few clever tricks and survives most casual cleanups …
The “I want my Go binary to bind port 80 without running as root” problem has three solutions of varying terribleness:
The first time I enabled auditd with the default rules on a small VPS, /var/log/audit/audit.log grew to 2 GB in eight hours and I watched the disk fill in real time. The default ruleset is built for compliance audits — …
Most production bash scripts I’ve inherited start with a comment block, then dive straight into echos and mkdirs and cps. They look fine. They run fine, most of the time. They fail mysteriously the one time it …
You’ve cleaned the malware files, deleted the backdoor admin accounts, rotated everyone’s password. The site is fine, you’re fine. Three weeks later someone logs in with a session cookie they grabbed during the compromise window and creates a fresh admin …
Your ~/Desktop has 437 files in it. Most of them are screenshots called Screenshot 2025-09-04 at 3.42.18 PM.png. You haven’t deleted them because some are useful (a tracking number, a UI bug, a recipe) but most aren’t, and you …
You’ve bought into one smart-home ecosystem — Hue lights, or SmartThings hub, or Apple HomeKit — and now every new device you consider has to be compatible with that brand. Three years in, you’ve also accumulated a Wyze camera, a …