Things I build, break, fix, and write about

8 July 2026
Local DNS proxy now preserves DNSSEC records

Cloudflare One Client for Windows now leaves DNSSEC records alone, which is exactly the sort of change I like, because it stops the client quietly meddling with answers. I have seen enough broken name resolution to know that a neat tunnel can still hide a messy DNS state.

8 July 2026
Cloudflare One Client for macOS DNS search suffixes

Cloudflare One Client for macOS can make a short hostname behave very differently, and most of the pain sits in the suffix list rather than DNS itself...

7 July 2026
Tracing acme.sh certificate handling in TLS interception

I spent too long chasing the neat version of TLS wiretapping reconstruction, then found the mess: shell parsing, token limits, and renewal timing. The...

7 July 2026
Reverse engineering game binaries with static analysis

Game binaries give up more than they should, if you know where to look. I start with binary analysis, not the folklore around the game, then use...

Latest blog posts you might like

5 April 2026
Process jails and kernel isolation for untrusted agent code

Running untrusted AI agents in standard Docker containers leaves you exposed to kernel exploits that bypass every namespace and policy you've layered on top. MicroVMs add a hardware boundary that...

3 April 2026
Using IP Reputation Data from Operation Synergia in Your Botnet Firewall Rules

Operation Synergia III sinkholed 45,000 botnet and malware IPs across 72 countries with law enforcement backing. That chain of custody makes the data worth blocking at your firewall; the catch is that...

1 April 2026
Zram and zswap: which memory compression fits your homelab

I've built systems that swap differently depending on what dies first: the CPU or the storage. Zram and zswap solve adjacent problems, and picking the wrong one costs you either write cycles or...

30 March 2026
Blink Outdoor 4 camera + 3 more Amazon tech bargains

Discover the Blink Outdoor 4 camera and three more tech deals this week.

28 March 2026
Azure credits documentation fails to flag marketplace

I deployed Claude via Azure AI Foundry assuming startup credits would cover it. The $1,600 invoice arrived mid-cycle, charged directly to my card. Microsoft's documentation never mentions that...

27 March 2026
n8n | stable

n8n 2 13 4: Patch release fixing Quick Connect flag and editor first load issue, stable on 2026 03 26, upgrade recommended

25 March 2026
Running Chromium on ARM64 Linux Servers: docker-compose Setup and Pitfalls

Google doesn't publish ARM64 Chrome. Chromium fills that gap on Debian-based ARM64 Linux systems, and any CDP automation library works identically against it. Pin the version, fix `/dev/shm`, work...

24 March 2026
Detecting spoofed VPN downloads: a practical approach

The trust UI lies by omission. A valid signature proves only that someone with a private key signed the file, not that the signer is the vendor you intended. Storm-2561 distributes trojanised VPN...

23 March 2026
Stellar Blade (PS5) + 2 more Amazon tech bargains

Check out these top Amazon deals including Stellar Blade for PS5 at £28.6.

22 March 2026
Petabyte leaks start with uncontrolled backup access

A single compromised credential reaching both production and backup storage across the same network boundary turns one day's data loss into months or years. Isolation done badly is barely isolation at...