Things I build, break, fix, and write about

16 September 2026
Pre-boot authentication for BitLocker

TPM-only BitLocker is convenient, but convenience is not the same as a proper boundary. BitLocker PINs push that line back to pre-boot, which is where I want it if the machine might be stolen, tampered with, or left somewhere I do not trust.

15 September 2026
Single-sided BPool joins drain mOCEAN via SideStaking

Ocean Protocol BPool single-sided join exit math is where this one falls apart, and I have a soft spot for bugs that look tidy until another contract...

15 September 2026
ecrecover checks for Lixir Vault permit signatures

Lixir Vault permit signatures looked ordinary until the final check was missing. If `ecrecover` only needs to return a nonzero address, you have not...

14 September 2026
Chaining logic bugs in Microsoft Edge sandbox escape

Microsoft Edge sandbox escape chains do not need memory corruption if the trust checks are loose enough. Orange Tsai’s Pwn2Own chain was nasty...

Latest blog posts you might like

27 March 2025
restic | v0.18.0

restic v0.18.0 brings security improvements, bug fixes, feature enhancements, dependency updates, and experimental features for a more robust backup solution.

21 March 2025
10 Strategies to Create Your Own Homelab Using Proxmox

Explore the power of Proxmox VE in building a scalable and flexible homelab, a vital tool for IT professionals refining their practical skills.

17 March 2025
How I Streamlined My Development Workflow with Docker Compose

Unlocking efficient development is easy with Docker Compose. In this guide, discover how to streamline your workflow, enhance collaboration, and simplify local environments.

13 March 2025
Running Speed Tests from the CLI on Sophos Firewall (Updated for SFOS 19+)

Learn to measure internet speed directly from your Sophos firewall, bypassing internal network issues. This guide covers essential CLI methods.

5 March 2025
Apple’s Legal Battle Against UK Government Over Encryption: The Latest Updates

Apple’s Legal Battle Against UK Government Over Encryption: The Latest Updates Apple Fights Back Against UK’s Encryption Crackdown The battle between Apple and the UK government over encrypted data...

28 February 2025
Apple’s Capitulation to UK Government Demands: A Grave Threat to Our Digital Privacy and How to Fight Back

Apple Bows to UK Government, Sacrificing User Privacy In an alarming turn of events, Apple has bowed to the UK government’s demands by removing Advanced Data Protection (ADP) for iCloud users in the...

22 February 2025
Reinventing Old Security Devices

Revitalize your outdated security devices into useful tools for your smart home. Discover creative ways to repurpose old tech, saving money and reducing waste.

7 February 2025
Voice Activation for Smart Homes: Harnessing Home Assistant's Assist

Introduction Ever tried shouting at your house to turn off the lights only to be met with silence? The struggles of getting smart home devices to respond to voice commands can leave you feeling more...

23 January 2025
How to Choose the Right MQTT Broker for Your IoT Project

Practical guidance on choosing an MQTT broker for IoT, covering security, scalability, performance and migration.

14 January 2025
How to Set Up Home Assistant Without a Raspberry Pi

Run Home Assistant without a Raspberry Pi: hardware options, HAOS or container installs, networking and maintenance.