peter bassill · operator
$ grep -l "tag:defence" writing/

tag: defence.

22 pieces tagged defence, newest first. The full taxonomy is on the tag index.

2026·07·11 Installing NextCloud Securely on Ubuntu with Apache A hardened NextCloud deployment on Ubuntu 24.04 with Apache, PHP 8.3, MySQL, Redis and Let's Encrypt. tutorial · defence · nextcloud · self-hosting · apache · mysql · redis · hardening 18 min 2026·07·09 Five shifts for cyber resilience in an AI-driven world The long-form version of a panel talk — five shifts AI forces on cyber resilience and assurance: assure the model not just the infrastructure, AI as threat and shield, a supply chain reaching upstream into the model, the accountability gap, and sovereignty at the edge. AI · assurance · defence 8 min 2026·06·17 Teaching Children About Online Safety — A Practical Guide for Parents Age-appropriate rules for internet access, how to talk to children about online risks, managing social media, and what to do when something goes wrong. tutorial · defence · online-safety · families · parenting · children · social-media · education 16 min 2026·06·10 Parental Controls on Windows, macOS, ChromeOS and Linux Configure built-in parental controls on every major operating system — screen time limits, content filtering, app restrictions, activity reports — plus browser, gaming platform and mobile device controls. tutorial · defence · parental-controls · windows · macos · chromeos · linux · families · parenting 26 min 2026·06·03 Securing Your Home Network to Protect Your Family Harden your router, deploy DNS-level content filtering, segment your network for children's devices and IoT, and schedule internet access — a practical guide for parents. tutorial · defence · home-network · families · dns · filtering · parenting · router 20 min 2026·06·02 A Parent's Guide to Spotting Phishing and Social Engineering Your children receive the same phishing messages you do, with less experience recognising them. This guide teaches you what to look for and how to explain it. tutorial · defence · phishing · social-engineering · families · parenting · education 10 min tutorial 2026·05·18 Backup Strategy for a Small Business: The 3-2-1 Rule in Practice Three copies, two media, one offsite. Everyone knows the rule. Almost nobody tests the restore. tutorial · defence · backup · small-business · disaster-recovery · resilience 12 min tutorial 2026·05·15 Deploying Wazuh for Home and Small Business — All-in-One Server with Linux, Windows and macOS Agents Build a complete SIEM and endpoint detection platform with the Wazuh all-in-one server on Ubuntu 24.04 LTS or Docker on Windows, then deploy agents across Linux, Windows and macOS. tutorial · defence · wazuh · siem · monitoring · ubuntu · windows · macos · security 30 min 2026·05·12 Configure Fail2Ban: Protecting Linux Services from Brute Force Install and configure Fail2Ban on Ubuntu to protect SSH, Apache and other services with rate-limiting and IP banning. tutorial · defence · fail2ban · linux · hardening · ssh 10 min 2026·04·07 Incident Response Planning for a Small Business Without a SOC You do not need a security operations centre to have a plan. You need a single page, an out-of-band phone number, and a Saturday morning. tutorial · defence · incident-response · small-business · governance · planning 12 min tutorial 2026·03·10 Hardening Microsoft 365 for a Small Business Most small businesses run Microsoft 365 and have never touched its security settings. This tutorial covers the controls that matter, in order of impact. tutorial · defence · microsoft-365 · small-business · hardening · email · cloud 14 min tutorial 2026·02·03 Setting Up MFA Everywhere: A Practical Small-Business Guide Multi-factor authentication is the single highest-leverage security control most small businesses still have not enabled. Ten minutes per service, done once. tutorial · defence · mfa · small-business · hardening · authentication 12 min tutorial 2026·01·21 Configure psad: Detecting Port Scans on Linux Install and configure psad on Ubuntu to detect and optionally block network port scans using iptables log analysis. tutorial · defence · psad · linux · hardening · intrusion-detection 9 min 2026·01·19 Installing and Configuring Postfix with ClamAV and SpamAssassin Build a hardened mail server on Ubuntu with Postfix for delivery, ClamAV for virus scanning and SpamAssassin for spam filtering, integrated through Amavis. tutorial · defence · postfix · clamav · spamassassin · email · hardening · amavis 22 min 2026·01·19 Self-Hosting a Password Manager with Vaultwarden on Ubuntu Every credential your organisation holds, stored on someone else's server. Vaultwarden gives you the Bitwarden experience without the trust dependency. tutorial · defence · vaultwarden · password-manager · self-hosting · docker · hardening 12 min tutorial 2025·12·08 Building a Honeypot with T-Pot on Ubuntu I have run honeypots since 1998. T-Pot bundles a dozen of them behind a single dashboard and turns passive observation into actionable intelligence. tutorial · defence · honeypot · t-pot · threat-intelligence · linux · hardening 15 min tutorial 2025·09·22 Setting Up Unattended Security Upgrades on Ubuntu Most Linux servers that get compromised had a patch available weeks before the breach. Unattended-upgrades applies security fixes while you sleep. tutorial · defence · patching · linux · hardening · ubuntu 8 min tutorial 2025·08·11 Setting Up WireGuard VPN on Ubuntu WireGuard is the VPN that replaced everything else on my network. Server setup, client configuration, DNS leak prevention, and kill switches. tutorial · defence · wireguard · vpn · linux · hardening · privacy 13 min tutorial 2025·07·09 Setting Up Pi-hole for Home DNS Filtering Pi-hole turns a spare machine into a network-wide ad and tracker filter. Every device benefits without any of them needing individual configuration. tutorial · defence · pi-hole · dns · privacy · home-network · families 12 min tutorial 2025·06·15 Configuring UFW Firewall Rules on Ubuntu UFW is the sane front-end to iptables. This tutorial covers default-deny policies, service rules, rate limiting, logging, and the Docker gotcha that breaks all of it. tutorial · defence · ufw · linux · hardening · firewall 9 min tutorial 2025·03·18 Installing GoPhish on Ubuntu 24.04 LTS and Configuring DNS for Phishing Simulation Deploy GoPhish with Postfix on Ubuntu, configure SPF, DKIM, DMARC, CAA and SRV records for your sending domains, and import campaign templates. tutorial · defence · gophish · phishing · dns · postfix · security-awareness 24 min 2021·08·21 wlan0: the unlocked back door on every TV Part 4 of 4. Once you have root on the TV, the most useful thing on the device isn't the data on it — it's the second network interface nobody disabled. What this bypasses, why the SIEM is blind to it, and what to do about it. hbbtv · iot · network · defence · research 10 min

→ all tags  ·  all writing