Things I build, break, fix, and write about

5 November 2026
Embedded payloads in trojanised PDF viewers

Modified PDF viewers are a neat little delivery trick because they look like ordinary job bait until someone opens them. I keep coming back to the same point, the file name is not the danger, the loader path is; that is where the unwanted code slips in.

5 November 2026
Ransomware group fragmentation and detection priorities

Ransomware group fragmentation means the label matters less than the behaviour, and I trust activity over reputation every time. A small crew with...

5 November 2026
Security Advisory – 05 Nov 2026

Daily security advisory summary for 05 Nov 2026

4 November 2026
Linux kernel net/sched UAF constraints on CentOS 9 desktop

Linux kernel net/sched use-after-free looks messy on paper, and on CentOS 9 Desktop it is worse, because the obvious paths are blocked and the useful...

Latest blog posts you might like

7 May 2026
Cognito federated login before user persistence

AWS Cognito’s awkward bit is not token issuance, it is timing. If `AWS Cognito PreSignUp_ExternalProvider` is not doing the real gatekeeping, you are already in cleanup territory, and I have no...

7 May 2026
AWS Cognito PreSignUp_ExternalProvider and federated account creation

Federated sign-in in Cognito is less tidy than people assume. If you put the check in the wrong trigger, AWS Cognito PreSignUp_ExternalProvider can still let a user record land before anyone else gets...

7 May 2026
Blocking AI traffic with DNS filtering

Blocking AI traffic starts at the resolver, not the firewall. I’d rather break a query cleanly with DNS filtering than watch it slip through a public resolver and look ordinary, which is exactly why...

7 May 2026
n8n | stable

n8n v2 19 4: bugfix release, dynamic Quick Connect disclaimer, webhook mode hooks, GIT SSH COMMAND restored, Snowflake Insert and Update fixed

6 May 2026
Siri privacy settings for shared rooms and offices

Siri privacy settings are only useful if the microphone is not sitting in the wrong room, listening for the wrong thing. I trust fewer devices in shared spaces, because voice assistant privacy usually...

6 May 2026
Token spend caps for AI APIs

AI token spend caps are one of the few sane ways to stop convenience from turning into a bill I have to explain later. Alerts are useful, but they arrive after the request has already spent the money;...

4 May 2026
Bosch High Pressure Washer EasyAquatak 120 + 2 more Amazon tech bargains

Discover the Bosch High Pressure Washer EasyAquatak 120 and two more tech bargains this week.

30 April 2026
n8n | stable

n8n 2 18 5: hide AI workflows, warn on publishing AI gateway creds, editor fixes, open executions from Connect usage, OpenAI dynamic image models

28 April 2026
Testing Proxmox restores before you rely on them

A green job in a Proxmox backup guide means very little until the restore boots, logs in, and serves traffic. I have trusted the dashboard before, only to find the archive was fine and the recovery...

27 April 2026
Network segmentation for vehicle telemetry in Home Assistant

Modern cars are noisy little computers, and vehicle telemetry isolation only works if you treat them that way from the start. I put the car on its own VLAN, lock the firewall down, then let Home...