Things I build, break, fix, and write about

29 July 2026
Headlamp in-cluster deployment and RBAC boundaries

Headlamp in-cluster deployment only makes sense when the UI belongs inside the cluster, and even then the service account should be painfully narrow. I trust the boundary, not the person using it on a quiet afternoon.

28 July 2026
Marketplace takedown pressure on vendor operations

Marketplace takedowns do more than pull a site offline, they cut through the vendor routines that keep sales moving. In dark web marketplaces, that...

28 July 2026
Brickstorm persistence in Microsoft 365

Brickstorm showed how Microsoft 365 persistence can survive a tidy password reset and a few blocked logins. I keep coming back to the same point, if...

27 July 2026
Restricting Serv-U access before patching

The SolarWinds Serv-U flaw is the sort of bug that turns a routine patch into an ugly afternoon, so I would block the obvious request pattern first...

Latest blog posts you might like

19 February 2026
Configuring Screenless Devices for Schools

Unlock the potential of screenless devices in education by minimising distractions and enhancing productivity. Discover effective setup and management strategies in this comprehensive guide.

19 February 2026
Firewall rules for model extraction attempts

Firewall rules for model extraction attempts AI models exposed over APIs get probed. A lot. Sometimes that is just noisy curiosity. Sometimes it is patterned traffic meant to map out model behaviour...

18 February 2026
Integrating AI software configurations in your homelab

Plan and version your homelab so AI software configurations remain reproducible, secure and easy to roll back. You should automate provisioning and testing, segment workloads on separate VLANs and...

18 February 2026
Assessing collision risks for AWS Outpost deployments

You should check telemetry for attitude alerts, sudden shutdowns, thermal spikes and short comms blackouts to identify collision risks for AWS Outpost deployments. Record exact timestamps, correlate...

17 February 2026
Training users to avoid LNK file threats

Mitigate Windows LNK file risks effectively by implementing key security measures and user training. Protect your system from shortcut vulnerabilities today.

17 February 2026
Security Advisory – 17 Feb 2026

Daily security advisory summary for 17 Feb 2026, selected for UK homelab and sysadmin readers.

16 February 2026
Maintaining user agency in AI decision-making

Maintain clear AI control by keeping decisions visible and reversible so you retain agency in your homelab; require explicit confirmation for critical actions, log inputs, model version and confidence...

16 February 2026
Metroid Prime 4: Beyond + 3 more Amazon tech bargains

Discover Metroid Prime 4: Beyond and three more tech deals this week on Amazon.

15 February 2026
Implementing a patch management strategy for your homelab

Implement a Patch Management Strategy for your homelab by keeping an accurate inventory and prioritising updates for internet-facing and critical systems. Test updates in a sandbox, automate low-risk...

15 February 2026
Validating Secure Boot behaviour in Windows updates

Prepare for Patch Tuesday by testing Secure Boot behaviour and power state transitions on your hosts before a broad rollout. Use a staged pilot, keep backups, and confirm BitLocker, Hyper-V and remote...