Things I build, break, fix, and write about

8 July 2026
Local DNS proxy now preserves DNSSEC records

Cloudflare One Client for Windows now leaves DNSSEC records alone, which is exactly the sort of change I like, because it stops the client quietly meddling with answers. I have seen enough broken name resolution to know that a neat tunnel can still hide a messy DNS state.

8 July 2026
Cloudflare One Client for macOS DNS search suffixes

Cloudflare One Client for macOS can make a short hostname behave very differently, and most of the pain sits in the suffix list rather than DNS itself...

7 July 2026
Tracing acme.sh certificate handling in TLS interception

I spent too long chasing the neat version of TLS wiretapping reconstruction, then found the mess: shell parsing, token limits, and renewal timing. The...

7 July 2026
Reverse engineering game binaries with static analysis

Game binaries give up more than they should, if you know where to look. I start with binary analysis, not the folklore around the game, then use...

Latest blog posts you might like

2 January 2026
Configuring Modbus for home automation

Modbus home automation guide. You will wire RS-485 correctly, map coils and registers, and assign unique slave IDs. You will test with a single node, check termination and parity, and log CRC errors....

1 January 2026
VoIP settings for reliable calls on Sophos XGS

Sophos XGS Firewall: optimise VoIP settings for reliable calls. Start by mapping your NAT, public IPs, VLANs, and ports. Lock firewall rules and allow only required SIP and RTP ranges. Mark media...

1 January 2026
Automating static IP-MAC management in Sophos firewall

I get asked this a lot. Someone turns up with a spreadsheet of 200 MACs and IPs and wants those turned into static IP-MAC reservation entries in a Sophos firewall without an afternoon of clicking...

31 December 2025
Configuring inbound TLS/SSL inspection on Sophos XG

Configure inbound TLS/SSL inspection on Sophos XG and XGS. You will learn when to use the Sophos WAF or a reverse proxy. You will see where to bind certificates and how to map public IPs with DNAT....

31 December 2025
Managing CVE-2022-48310 with Sophos Connect

Sophos Connect vulnerabilities, including CVE-2022-48310, may appear on macOS scans. Check your app version, confirm the flagged library with mdls and otool, then follow Sophos guidance or apply...

30 December 2025
Understanding user feedback on Sophos Firewall v22

Sophos Firewall v22 user experiences show Health Check and XDR are key. Back up your configuration, check disk space, and test XDR in a lab before you upgrade. Clean your rule base, enable two-factor...

30 December 2025
Configuring firewall rules in Sophos Firewall v22

Prepare before you upgrade. Check device support and free disk space, back up configs and snapshots. Use clear rule names, narrow objects and specific service ports. Enable logging and review hit...

29 December 2025
Understanding sparse files in Linux environments

Sparse files let you create large logical files that consume little physical disk space until you write data. Use them for VM images, test files or temporary swap, but monitor actual usage with du and...

29 December 2025
Configuring privacy settings in Linux Mint for lawyers

I’ve used Linux Mint on client laptops and for sensitive files. Mint is fine for this sort of job if you configure it properly. Treat the machine as a tool, not a promise. Plan the disk layout, lock...

28 December 2025
Setting up a Linux lab with CachyOS

Linux Lab Configuration: Start with hardware that fits your needs. Create install media and enable virtualization in firmware. Assign static IPs and separate traffic with VLANs. Apply strict firewall...