Things I build, break, fix, and write about

16 September 2026
Monitoring radio, transport and core faults

Private 5G resilience does not come from a cheerful dashboard or a nice radio map. I want to see where the attach failed, which path dropped, and whether the core is quietly spoiling the whole thing; otherwise you are guessing, and guessing is a poor plan when the network is already sulking.

16 September 2026
Pre-boot authentication for BitLocker

TPM-only BitLocker is convenient, but convenience is not the same as a proper boundary. BitLocker PINs push that line back to pre-boot, which is where...

15 September 2026
Single-sided BPool joins drain mOCEAN via SideStaking

Ocean Protocol BPool single-sided join exit math is where this one falls apart, and I have a soft spot for bugs that look tidy until another contract...

15 September 2026
ecrecover checks for Lixir Vault permit signatures

Lixir Vault permit signatures looked ordinary until the final check was missing. If `ecrecover` only needs to return a nonzero address, you have not...

Latest blog posts you might like

7 September 2026
Turbopack and single-locale middleware bypass in Next.js

A single locale entry in i18n.locales changed the shape of my request path, and Turbopack stopped behaving like I expected. The Next.js App Router middleware bypass was quiet, awkward, and exactly the...

7 September 2026
Weekly Tech Digest | 07 Sep 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

6 September 2026
Cloudflare WAF rules for Nuxt Server Islands

Cloudflare’s new WAF coverage is useful, but it is still just a filter in front of broken software. I care less about the headline and more about whether Cloudflare WAF rules for Nuxt Server Islands...

6 September 2026
Cloudflare WAF scheduled release: rule ID changes

Cloudflare WAF scheduled release is mostly about rule IDs, and that is where the mess starts. The traffic may not change much, but the logs, suppressions, and reports will. I have seen enough of these...

5 September 2026
Blocking CVE-2026-50522 with Cloudflare WAF Managed Rules

Cloudflare WAF Managed Rules have changed in ways that matter, and I would not trust old labels to tell the full story. The SharePoint RCE rule now blocks by default, while some SSRF entries have...

5 September 2026
Public endpoints on search.ai.cloudflare.com

Cloudflare AI Search starts useful and gets messy the moment the endpoint escapes into logs, browser history, and stale config. I prefer a custom domain and Access in front of it, because public...

4 September 2026
Reading upstream diversity in Cloudflare Radar

Cloudflare Radar AS routing looks tidy until you remember it is built from observed BGP paths, not the whole internet. I trust it most when a chart looks awkward, because that is usually where the...

3 September 2026
Sidecar deployment using cloudflare/mesh in a Pod

I prefer keeping the Cloudflare Mesh container image beside the app, not baked into it. The Pod stays clean, the app stays ignorant, and the irritating bit lives where it can be replaced without...

3 September 2026
Cloudflare AI Gateway unified billing and limits

Cloudflare AI Gateway unified billing is one of those settings that looks minor until the bill starts moving in a different direction. I’ve seen enough homelab nonsense to know the boring controls...

2 September 2026
AI governance boundaries in product organisations

Google DeepMind is a useful place to watch when product pressure meets safety theatre. The interesting bit is not the model release, but who has the nerve, and the authority, to say no when the...