Things I build, break, fix, and write about

5 November 2026
Embedded payloads in trojanised PDF viewers

Modified PDF viewers are a neat little delivery trick because they look like ordinary job bait until someone opens them. I keep coming back to the same point, the file name is not the danger, the loader path is; that is where the unwanted code slips in.

5 November 2026
Ransomware group fragmentation and detection priorities

Ransomware group fragmentation means the label matters less than the behaviour, and I trust activity over reputation every time. A small crew with...

5 November 2026
Security Advisory – 05 Nov 2026

Daily security advisory summary for 05 Nov 2026

4 November 2026
Linux kernel net/sched UAF constraints on CentOS 9 desktop

Linux kernel net/sched use-after-free looks messy on paper, and on CentOS 9 Desktop it is worse, because the obvious paths are blocked and the useful...

Latest blog posts you might like

26 May 2026
Why AI-promoted commencement speeches backfire

AI-promoted commencement speeches fail for the same reason most institutional waffle does, they sound prepared for approval, not for people. Graduates can spot that instantly, and once they do, the...

25 May 2026
Global domain takedown order and DNS controls

A global domain takedown order sounds neat on paper, but the web is stitched together by registries, registrars, proxies, and hosts, each with their own limits. I have seen enough of DNS controls to...

25 May 2026
Home Assistant wall controller for local bulb control

Zigbee wall switch controllers are one of the few smart home bits I trust not to annoy me later. Keep the bulbs live, keep the wall position, and let Home Assistant handle the logic; it feels ordinary...

25 May 2026
Weekly Tech Digest | 25 May 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

24 May 2026
Detecting node contention with Pressure Stall Information

Kubernetes PSI metrics are useful because they show waiting, not just work, and that is where the awkward node problems usually hide. I trust them more than busy-looking charts, but only after I have...

24 May 2026
Topology-aware scheduling with PodGroup and DRA

Kubernetes PodGroup scheduling only makes sense once you stop treating the group as a template trick and start treating it as live state. I like that split, because it forces the scheduler to deal...

23 May 2026
Kubernetes Service externalIPs deprecation and replacements

Kubernetes Service externalIPs has always been a bit too trusting for my taste, and 1.36 finally starts treating it that way. If you still rely on it, now is the time to move the address ownership...

23 May 2026
Mixed Version Proxy during Kubernetes 1.36 upgrades

Kubernetes Mixed Version Proxy is one of those fixes you only notice when it is missing. During a 1.36 control plane upgrade, it stops an older API server from handing out tidy little lies, the sort...

22 May 2026
Weekly Tech Digest | 22 May 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

22 May 2026
Measuring route_controller_route_sync_total in Kubernetes

`route_controller_route_sync_total` is the sort of metric I trust only when I put it next to real node activity. By itself it tells you little; alongside churn, it shows whether the route controller...