Cybersecurity on Nalar

Practical Threat Modeling with Trust Boundaries and Abuse Cases

Tue, 01 Sep 2026 00:00:00 +0700

Threat modeling is most useful before a vulnerability becomes a patch request. It gives a team a structured way to ask how a system can be misused, which assumptions are security-sensitive, and where defenses should exist.

A useful threat model does not need to be a large document. For many services, a one-page data-flow sketch plus a prioritized set of abuse cases is enough to improve design decisions.

Begin with assets and security goals

Start by identifying what the system is trying to protect.

Reduce Software Supply Chain Risk with Dependency Controls

Tue, 01 Sep 2026 00:00:00 +0700

Modern applications routinely execute code downloaded from package registries, container registries, build actions, and language-specific ecosystems. That convenience creates supply chain risk: an attacker does not need to compromise your source repository if they can compromise something your build trusts.

No single control eliminates this risk. The practical approach is to reduce unnecessary trust and make dependency changes visible.

Treat dependency resolution as a security boundary

A manifest may specify broad version ranges, while a lockfile records the exact dependency graph selected for a build.

.htaccess Rules to Prevent PHP Execution

Wed, 03 Sep 2025 00:00:00 +0700

Public upload directories are a common security-sensitive part of web applications. If an attacker manages to upload a file such as shell.php and the web server executes it, the upload feature can become a route to remote code execution.

On Apache, a directory-specific .htaccess configuration can help prevent script execution in locations that should contain only static files.

Why `.htaccess` Can Help

Apache supports .htaccess files for directory-level configuration when the server permits the relevant overrides. This makes it possible to apply security rules to a specific directory without changing every virtual-host setting.

Creating a CA Bundle and Converting an SSL Certificate to .PFX

Wed, 03 Sep 2025 00:00:00 +0700

Managing SSL/TLS certificates is a routine task for many developers and system administrators. One common requirement is to combine intermediate certificates into a CA bundle and then convert the certificate and private key into a .pfx file.

The .pfx format, also known as PKCS#12, is commonly used when importing certificates into Windows Server and IIS, Microsoft Exchange, and other applications that expect a PKCS#12 bundle.

This guide walks through the process.

How to Block IP Ranges with `.htaccess`

Wed, 03 Sep 2025 00:00:00 +0700

One useful feature of Apache is the flexibility of .htaccess. In addition to URL rewriting and caching rules, .htaccess can also restrict access based on IP addresses.

If you are dealing with spam bots, brute-force attempts, or unwanted traffic from a particular network, one quick option is to block an individual IP address or an entire range.

Block a Single IP Address

To block one IP address, use:

$el.innerText = 'Copy', 2000)" class="absolute top-2 right-2 bg-neutral-700 text-white text-xs px-2 py-1 rounded opacity-0 group-hover:opacity-100 transition-opacity" > Copy

<RequireAll>
  Require all granted
  Require not ip 192.168.1.100
</RequireAll>

This blocks 192.168.1.100 while allowing other clients to access the site.

How to Whitelist IP Address Ranges with .htaccess

Wed, 03 Sep 2025 00:00:00 +0700

.htaccess is useful for more than URL rewriting and caching. It can also provide an additional access-control layer, including restricting an application to specific IP addresses or IP ranges.

This technique can be useful when:

An application is still in development and should only be available to an internal team.
You want to protect sensitive paths such as /admin or /api.
A server should only be reachable from an office network or VPN.

Whitelist One IP Address

To allow only one IP address:

Cybersecurity on Nalar

Practical Threat Modeling with Trust Boundaries and Abuse Cases

Begin with assets and security goals

Reduce Software Supply Chain Risk with Dependency Controls

Treat dependency resolution as a security boundary

.htaccess Rules to Prevent PHP Execution

Why .htaccess Can Help

Creating a CA Bundle and Converting an SSL Certificate to .PFX

How to Block IP Ranges with `.htaccess`

Block a Single IP Address

How to Whitelist IP Address Ranges with .htaccess

Whitelist One IP Address

Why `.htaccess` Can Help