Things I build, break, fix, and write about

20 April 2026
Security Advisory – 18 Apr 2026

Daily security advisory summary for 18 Apr 2026

19 April 2026
Sport bike power draw: battery backup planning for garages

A fast bike review can turn into a useful smart home power and noise checklist if you stop guessing and measure the garage properly. I prefer that to...

19 April 2026
Choosing WireGuard over self-hosted firewalls for home use

A home VPN setup should be dull, and WireGuard gets there faster than most. I prefer one small tunnel, a few clear rules, and no afternoon lost to a...

18 April 2026
Security Advisory – 18 Apr 2026

Daily security advisory summary for 18 Apr 2026

Latest blog posts you might like

14 April 2026
Moving keepsakes offsite without losing local Nextcloud

I keep Nextcloud for daily use, but the real safety net sits off the box. A digital keepsakes backup strategy only starts to make sense when restores are boring, not hopeful, and I have learned not to...

14 April 2026
Security Advisory – 14 Apr 2026

Daily security advisory summary for 14 Apr 2026

13 April 2026
Tenant isolation failures expose financial metadata leakage

Multi-tenant data isolation failures happen when scope checks live at the presentation layer instead of the query layer. Lloyds learned this the hard way; I'll show you why it matters in your homelab...

13 April 2026
Amazon Fire TV Stick HD and 2 more Amazon tech bargains

Discover the Amazon Fire TV Stick HD and more tech deals this week.

12 April 2026
Isolating n8n in Docker: network policies and backup

Running n8n in your homelab without proper isolation is a liability. CVE-2025-68613 lets authenticated users execute code with container privileges; if that container sits on your default Docker...

11 April 2026
Offline agentic AI coding without subscription limits or

Running a local model means no quota walls, no token metre ticking, and no surprise bills when the agent loops through ten reasoning steps. Cloud coding assistants collapse under agentic use; local...

10 April 2026
Blocking residential proxy traffic with stateful firewall

Most home routers allow everything outbound by default, which is exactly how AVRecon persisted undetected for six years. A stateful firewall with explicit outbound rules and network segmentation...

9 April 2026
Personal health data needs local storage, not cloud

Health data inside a corporate platform means health data inside a jurisdiction you do not control, encrypted or not. Self-hosting it locally—with proper backups and audit trails—trades convenience...

7 April 2026
Privilege boundaries as lateral movement stops

A compromised host on a flat network can reach every other node without crossing a single firewall rule. Network perimeter checks are useless if the interior is trusted by default; that is where...

6 April 2026
Air-gapped browsing in homelabs: containment without

A 48-hour gap between exploit discovery and patch deployment is normal, not exceptional. Browser isolation in your homelab is not about making the browser safe; it is about making sure a compromised...