pajus @published 2026-10-08 · 12 min read nftables Default-Drop Firewall on Debian 13 Build a default-drop nftables firewall on Debian 13: named sets, SSH rate limits, ICMPv6, a timed rollback against lockout, and Docker pitfalls. Tags Firewall Debian Linux Security Server Hardening Docker
pajus @published 2026-09-24 · 10 min read How Container Escapes Work: runc and Defenses How container escapes work via the 2025 runc procfs bugs, and how to audit and harden a Debian 13 Docker or Podman host with checks you can verify. Tags Docker Privilege Escalation Debian Linux Security Server Hardening