Things I build, break, fix, and write about

8 July 2026
Local DNS proxy now preserves DNSSEC records

Cloudflare One Client for Windows now leaves DNSSEC records alone, which is exactly the sort of change I like, because it stops the client quietly meddling with answers. I have seen enough broken name resolution to know that a neat tunnel can still hide a messy DNS state.

8 July 2026
Cloudflare One Client for macOS DNS search suffixes

Cloudflare One Client for macOS can make a short hostname behave very differently, and most of the pain sits in the suffix list rather than DNS itself...

7 July 2026
Tracing acme.sh certificate handling in TLS interception

I spent too long chasing the neat version of TLS wiretapping reconstruction, then found the mess: shell parsing, token limits, and renewal timing. The...

7 July 2026
Reverse engineering game binaries with static analysis

Game binaries give up more than they should, if you know where to look. I start with binary analysis, not the folklore around the game, then use...

Latest blog posts you might like

14 December 2025
Build AI agents in Google Workspace Studio

Google Workspace Studio lets you build AI agents without code. Start with a small, safe use case. Limit scopes, test with sample data, and require your approval for destructive steps. Log actions and...

13 December 2025
Integrating confession mechanisms in legal AI applications

AI confession mechanisms give clear uncertainty signals for legal and healthcare AI. This guide shows how you spot risks, design machine readable confessions, integrate human review, and test...

13 December 2025
Understanding Apple’s privacy safeguards amid leadership changes

Apple’s senior changes can shift how privacy is defended at product level. Legal and policy moves can change priorities and public positions. Jennifer Newstead is slated to become Apple’s general...

12 December 2025
Negotiate Microsoft 365 renewals to mitigate costs

Microsoft 365 price increases will raise per user bills. This guide shows you how to check SKU counts, measure feature use and negotiate renewals. Use scripts to export exact licence data, reduce...

12 December 2025
Navigating licensing for AI-generated music

Manage licensing for AI-generated music on your homelab. Follow legal checks, tagging, streaming controls, automation hooks, and backup patterns that work. Label generated files, store licences with...

11 December 2025
Addressing shadow IT in Department of Defense communications

Non-Approved Messaging Apps create backchannels that bypass controls, audit trails and record retention. You should deploy an approved messaging tool, enforce mobile device management and use data...

11 December 2025
Choosing ZFS for Proxmox on your NUC

Proxmox Storage Strategies matter on a NUC. I run Proxmox on small hardware all the time, so I will walk you through the choices, trade offs and a practical ZFS setup that fits a two‑slot NUC. I keep...

10 December 2025
kopia | v0.22.3

kopia v0.22.3 updates include defect fixes for compression, new snapshots feature for local filesystem options, and CI/CD improvements by removing ineffective tags.

10 December 2025
Comparing Home Assistant deployment methods in Proxmox

I moved Home Assistant onto Proxmox and ended up weighing two choices: LXC or a full VM. Both run the same smarthome stack, but they behave differently once you start adding hardware and updates into...

10 December 2025
restic | v0.18.1

Restic v0.18.1 brings key bug fixes and improvements, enhancing backup command reliability, error management, and file permission handling for users.