New posts in Webserver

Is running "apt-get upgrade" every so often enough to keep a Web-server secure?

Giving malicious crawlers and scripts a hard time

Understanding an attempt to exploit a webserver

What website accepts only TLS 1.2 so I can verify client capability?

Is it practical to pre-blacklist certain GeoIP regions?

Are there any sequences other than ../ which will be intepreted as directory traversal in *nix or Windows?

Any way to browse OSVDB?

What are the dangers of advertising my MySQL-powered amateur site?

Script Kiddies - how do they find my server IP?

Should I use a second/dedicated IP address for SSH?