Things I build, break, fix, and write about

5 November 2026
Embedded payloads in trojanised PDF viewers

Modified PDF viewers are a neat little delivery trick because they look like ordinary job bait until someone opens them. I keep coming back to the same point, the file name is not the danger, the loader path is; that is where the unwanted code slips in.

5 November 2026
Ransomware group fragmentation and detection priorities

Ransomware group fragmentation means the label matters less than the behaviour, and I trust activity over reputation every time. A small crew with...

5 November 2026
Security Advisory – 05 Nov 2026

Daily security advisory summary for 05 Nov 2026

4 November 2026
Linux kernel net/sched UAF constraints on CentOS 9 desktop

Linux kernel net/sched use-after-free looks messy on paper, and on CentOS 9 Desktop it is worse, because the obvious paths are blocked and the useful...

Latest blog posts you might like

26 April 2026
Isolating Android on a VLAN with firewall rules and DNS split

I would not migrate an Android phone into my homelab blind. A clean Android homelab firewall DNS split, with VLAN isolation and hard DNS rules, keeps the phone useful without letting it sniff around...

26 April 2026
Security Advisory – 24 Apr 2026

Daily security advisory summary for 24 Apr 2026

25 April 2026
Setting lifecycle tracking for kitchen appliances with Home Assistant

I stopped treating appliance failure as a surprise and built a Home Assistant replacement schedule around dates, run counts, and service history. It is plain, slightly dull, and far more useful than...

25 April 2026
Security Advisory – 24 Apr 2026

Daily security advisory summary for 24 Apr 2026

24 April 2026
Network segmentation with VLANs, DNS and firewall rules

A proper network blueprint is mostly unglamorous discipline, VLANs with a job, DNS that stays in its lane, firewall rules that mean something, and DHCP reservations that do not rely on memory. Get...

24 April 2026
Security Advisory – 23 Apr 2026

Daily security advisory summary for 23 Apr 2026

23 April 2026
Safe ways to remove Copilot from Windows applications

Windows has a habit of putting Copilot back after updates, so I check policy first, then the package itself. If you need to remove Microsoft Copilot from Windows properly, the trick is knowing which...

23 April 2026
n8n | stable

n8n 2 17 5: enforces credential access for dynamic node parameters, fixes credential exposure risk, upgrade recommended for admins and self hosted users

23 April 2026
Security Advisory – 21 Apr 2026

Daily security advisory summary for 21 Apr 2026

22 April 2026
Configuration management prevents home lab drift

Cheap kit only stays cheap if the software side stays disciplined. A home lab software stack turns into a mess the moment settings live in web forms and half the logic sits in your head, which is a...