Things I build, break, fix, and write about

8 July 2026
Local DNS proxy now preserves DNSSEC records

Cloudflare One Client for Windows now leaves DNSSEC records alone, which is exactly the sort of change I like, because it stops the client quietly meddling with answers. I have seen enough broken name resolution to know that a neat tunnel can still hide a messy DNS state.

8 July 2026
Cloudflare One Client for macOS DNS search suffixes

Cloudflare One Client for macOS can make a short hostname behave very differently, and most of the pain sits in the suffix list rather than DNS itself...

7 July 2026
Tracing acme.sh certificate handling in TLS interception

I spent too long chasing the neat version of TLS wiretapping reconstruction, then found the mess: shell parsing, token limits, and renewal timing. The...

7 July 2026
Reverse engineering game binaries with static analysis

Game binaries give up more than they should, if you know where to look. I start with binary analysis, not the folklore around the game, then use...

Latest blog posts you might like

28 April 2026
Testing Proxmox restores before you rely on them

A green job in a Proxmox backup guide means very little until the restore boots, logs in, and serves traffic. I have trusted the dashboard before, only to find the archive was fine and the recovery...

27 April 2026
Network segmentation for vehicle telemetry in Home Assistant

Modern cars are noisy little computers, and vehicle telemetry isolation only works if you treat them that way from the start. I put the car on its own VLAN, lock the firewall down, then let Home...

26 April 2026
Isolating Android on a VLAN with firewall rules and DNS split

I would not migrate an Android phone into my homelab blind. A clean Android homelab firewall DNS split, with VLAN isolation and hard DNS rules, keeps the phone useful without letting it sniff around...

26 April 2026
Security Advisory – 24 Apr 2026

Daily security advisory summary for 24 Apr 2026

25 April 2026
Setting lifecycle tracking for kitchen appliances with Home Assistant

I stopped treating appliance failure as a surprise and built a Home Assistant replacement schedule around dates, run counts, and service history. It is plain, slightly dull, and far more useful than...

25 April 2026
Security Advisory – 24 Apr 2026

Daily security advisory summary for 24 Apr 2026

24 April 2026
Network segmentation with VLANs, DNS and firewall rules

A proper network blueprint is mostly unglamorous discipline, VLANs with a job, DNS that stays in its lane, firewall rules that mean something, and DHCP reservations that do not rely on memory. Get...

24 April 2026
Security Advisory – 23 Apr 2026

Daily security advisory summary for 23 Apr 2026

23 April 2026
Safe ways to remove Copilot from Windows applications

Windows has a habit of putting Copilot back after updates, so I check policy first, then the package itself. If you need to remove Microsoft Copilot from Windows properly, the trick is knowing which...

23 April 2026
n8n | stable

n8n 2 17 5: enforces credential access for dynamic node parameters, fixes credential exposure risk, upgrade recommended for admins and self hosted users