Insights / Tag
#security
Cloud · Illustrative scenario
S3 HeadObject 403: prove the key before widening access
A denied metadata request can hide a missing key. Use exact object references and same-identity comparisons before editing access policies.
Security · Illustrative scenario
Docker build secrets: keep tokens out of image layers
A temporary BuildKit mount solves credential transport. A disposable dummy-token probe shows what it does, what cache hides and what your build can still leak.
Cloud & Infrastructure News
PHP security alert: why sites went offline on 21 October
A dated account of the 21 October PHP alert, the precautionary shutdowns and the evidence operators need before restoring public access.
