IT blog of Jury Sosnovsky
Technical guides to protecting Linux servers, websites, credentials, encrypted connections, and network infrastructure with practical, verifiable configuration choices.
How can AI models invisibly watermark generated text without hidden characters or metadata? This article explains the path from classical and linguistic steganography to modern LLM watermarking techniques, including green/red tokens, pseudorandom functions, entropy, Tournament Sampling, and SynthID-Text, as well as detection methods, limitations, and resistance to editing and paraphrasing. Read the full article
A practical guide to post-quantum key exchange in Nginx using X25519MLKEM768 and OpenSSL 3.5, including an experimental OQS Provider setup for Debian 12. Read the full article
A practical SSH hardening guide: create a dedicated administrator, authenticate with keys, configure sudo, disable direct root access, and turn off password-based logins. Read the full article
A practical website migration strategy that keeps the old Nginx server online as a reverse proxy while DNS records propagate and visitors move safely to the new infrastructure. Read the full article
A detailed Nginx HTTPS configuration guide covering certificate chains, private keys, secure TLS protocols and ciphers, Diffie–Hellman parameters, OCSP stapling, HSTS, session caching, and HTTP redirects. Read the full article
A practical walkthrough of obtaining a free WoSign SSL certificate for a domain and its subdomains, generating a private key and CSR with OpenSSL, and completing domain validation. Read the full article