<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Faruk Ahmed</title>
    <description>The latest articles on DEV Community by Faruk Ahmed (@bornaly).</description>
    <link>https://dev.to/bornaly</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F2539780%2F0081c5e5-62ab-48bc-bdb1-bad39d05e21b.jpg</url>
      <title>DEV Community: Faruk Ahmed</title>
      <link>https://dev.to/bornaly</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/bornaly"/>
    <language>en</language>
    <item>
      <title>I Got Tired of Guessing About Linux Security — So I Built a One-Command Snapshot</title>
      <dc:creator>Faruk Ahmed</dc:creator>
      <pubDate>Thu, 01 Jan 2026 02:31:40 +0000</pubDate>
      <link>https://dev.to/bornaly/i-got-tired-of-guessing-about-linux-security-so-i-built-a-one-command-snapshot-51m0</link>
      <guid>https://dev.to/bornaly/i-got-tired-of-guessing-about-linux-security-so-i-built-a-one-command-snapshot-51m0</guid>
      <description>&lt;p&gt;Most Linux servers don’t fail loudly when something goes wrong.&lt;br&gt;
They drift.&lt;/p&gt;

&lt;p&gt;A new cron job.&lt;br&gt;
A modified binary.&lt;br&gt;
A quiet outbound connection.&lt;/p&gt;

&lt;p&gt;Nothing obvious — until it matters.&lt;/p&gt;

&lt;p&gt;I noticed that when I wanted to “check a server,” I kept running the same commands manually, hoping I didn’t forget anything. That doesn’t scale, and it’s easy to miss context.&lt;/p&gt;

&lt;p&gt;So I built a small, read-only tool for myself:&lt;/p&gt;

&lt;p&gt;Linux Blindspot Report&lt;br&gt;
It runs once and generates:&lt;br&gt;
A risk score + severity summary&lt;br&gt;
A clean HTML report&lt;br&gt;
A TXT report for SSH-only systems&lt;/p&gt;

&lt;p&gt;A local evidence pack you can review or escalate&lt;/p&gt;

&lt;p&gt;No agents.&lt;br&gt;
No installs.&lt;br&gt;
Nothing sent off the box.&lt;/p&gt;

&lt;p&gt;It doesn’t replace full forensics — it gives you fast clarity.&lt;/p&gt;

&lt;p&gt;If you’re interested, details are here:&lt;br&gt;
👉 [&lt;a href="https://ko-fi.com/s/288adc543e" rel="noopener noreferrer"&gt;https://ko-fi.com/s/288adc543e&lt;/a&gt;]&lt;/p&gt;

&lt;p&gt;I also share a free SSH hardening checklist (no email):&lt;br&gt;
👉 [&lt;a href="https://preview.mailerlite.io/preview/1998020/sites/174539599429764363/6lso1l?fresh=1" rel="noopener noreferrer"&gt;https://preview.mailerlite.io/preview/1998020/sites/174539599429764363/6lso1l?fresh=1&lt;/a&gt;]&lt;/p&gt;

&lt;p&gt;Happy to hear feedback from other Linux admins.&lt;/p&gt;

</description>
      <category>blueteam</category>
      <category>sysad</category>
      <category>opensource</category>
      <category>cybersecurity</category>
    </item>
  </channel>
</rss>
