Things I build, break, fix, and write about

24 April 2026
Network segmentation through VLAN, DNS and firewall strategy

A proper network blueprint is mostly unglamorous discipline, VLANs with a job, DNS that stays in its lane, firewall rules that mean something, and DHCP reservations that do not rely on memory. Get that wrong, and the first odd device will expose it.

24 April 2026
Security Advisory – 23 Apr 2026

Daily security advisory summary for 23 Apr 2026

23 April 2026
Safe methods for Copilot removal across Windows applications

Windows has a habit of putting Copilot back after updates, so I check policy first, then the package itself. If you need to remove Microsoft Copilot...

23 April 2026
Security Advisory – 21 Apr 2026

Daily security advisory summary for 21 Apr 2026

Latest blog posts you might like

14 April 2026
Moving keepsakes offsite without losing local Nextcloud

I keep Nextcloud for daily use, but the real safety net sits off the box. A digital keepsakes backup strategy only starts to make sense when restores are boring, not hopeful, and I have learned not to...

14 April 2026
Security Advisory – 14 Apr 2026

Daily security advisory summary for 14 Apr 2026

13 April 2026
Tenant isolation failures expose financial metadata leakage

Multi-tenant data isolation failures happen when scope checks live at the presentation layer instead of the query layer. Lloyds learned this the hard way; I'll show you why it matters in your homelab...

13 April 2026
Amazon Fire TV Stick HD and 2 more Amazon tech bargains

Discover the Amazon Fire TV Stick HD and more tech deals this week.

12 April 2026
Isolating n8n in Docker: network policies and backup

Running n8n in your homelab without proper isolation is a liability. CVE-2025-68613 lets authenticated users execute code with container privileges; if that container sits on your default Docker...

11 April 2026
Offline agentic AI coding without subscription limits or

Running a local model means no quota walls, no token metre ticking, and no surprise bills when the agent loops through ten reasoning steps. Cloud coding assistants collapse under agentic use; local...

10 April 2026
Blocking residential proxy traffic with stateful firewall

Most home routers allow everything outbound by default, which is exactly how AVRecon persisted undetected for six years. A stateful firewall with explicit outbound rules and network segmentation...

9 April 2026
Personal health data needs local storage, not cloud

Health data inside a corporate platform means health data inside a jurisdiction you do not control, encrypted or not. Self-hosting it locally—with proper backups and audit trails—trades convenience...

7 April 2026
Privilege boundaries as lateral movement stops

A compromised host on a flat network can reach every other node without crossing a single firewall rule. Network perimeter checks are useless if the interior is trusted by default; that is where...

6 April 2026
Air-gapped browsing in homelabs: containment without

A 48-hour gap between exploit discovery and patch deployment is normal, not exceptional. Browser isolation in your homelab is not about making the browser safe; it is about making sure a compromised...