Let's Secure Me

Best practices and tips to secure your infrastructure.

A Kids' Wi-Fi Name Is Not a Security Boundary: A Parent's Threat-Model Checklist

Separate screen-time controls from network security with a practical checklist for guest access, router administration and children's data privacy.

A second SSID labelled "Kids" is a policy, not a firewall. This threat-model worksheet separates time controls from real network isolation and child-data privacy — with documented-boundary checks, benign connectivity tests, router hygiene, a vendor data questionnaire, and a go/no-go checklist.

OpenClaw Security Hardening Guide (2026): Safe-by-Default Setup for Personal AI Agents

Threat model, host baseline, secrets hygiene, and automation boundaries — a production checklist for running OpenClaw without regret.

Production-grade hardening guide for self-hosted OpenClaw. Covers threat modeling, dedicated user setup, SSH and firewall lockdown, secrets management, auditd logging, backup and recovery, safe automation boundaries, a 16-point deployment checklist, and a practical FAQ.

CVE-2026-27654: NGINX DAV + alias Buffer Overflow — Risk Assessment and Practical Hardening Guide

Heap-based buffer overflow in ngx_http_dav_module crashes workers or lets attackers manipulate file paths outside the document root.

Incident-response guide for CVE-2026-27654. Covers affected configuration matrix, detection checklist, immediate mitigations (disable COPY/MOVE, switch alias to root), patch and upgrade path, validation commands, and post-fix monitoring for WebDAV deployments.