#security

3 post(s)

Profiles and Secrets:Stop Baking Production Into the Jar

Split Spring Boot config by profile, bind settings to a @ConfigurationProperties record, and inject secrets from the environment instead of committing them in the jar.

AI/ML

Hardening MCP Servers:Auth, Least Privilege, and Tool Safety

Trust boundaries, host approval UX, env secrets, input validation, read-only vs mutating tools, and a practical hardening checklist for a TypeScript MCP bookmarks server.

Linux

Linux sudo and /etc/sudoers:Manage Privileged Access with Intent

Hands-on sudo and sudoers recipes — run commands as root or another user, edit policy safely with visudo, and delegate fine-grained privileges without handing out full root.