Security | Sergio Comerón

I wanted Sign in with Apple. I put a passkey instead

27 Aug 2026 5 min lectura 5 min read

I wanted Face ID on the portal. Sign in with Apple was not worth it. How to add a passkey to a PHP site.

#web #security #self-hosting #php

The biggest npm attack didn't touch me, and it wasn't foresight

5 Aug 2026 5 min lectura 5 min read

Over 400 npm packages compromised and two billion monthly installs affected. I went to check my server expecting the worst and found zero. Why, and why I'm not proud of it.

#security #npm #self-hosting #javascript

Leer artículoRead article

Protecting a home-served API from a flood without spending a cent

21 Jun 2026 4 min lectura 4 min read

I serve several public APIs from a Mac mini at home. Here's how I kept a flood from taking down the whole machine: free Cloudflare rate-limiting and non-blocking locks at the origin.

#cloudflare #apache #php #security

Leer artículoRead article

What's new in the Jitsi plugin v5.0

3 May 2026 5 min lectura 5 min read

mod_jitsi 5.0 introduces a Developer Portal with opt-in telemetry, a full attendance report with recording heatmap, real-time presence and email invitations from the activity.

#moodle #jitsi #recordings #ai

Leer artículoRead article