Things I build, break, fix, and write about

29 July 2026
Headlamp in-cluster deployment and RBAC boundaries

Headlamp in-cluster deployment only makes sense when the UI belongs inside the cluster, and even then the service account should be painfully narrow. I trust the boundary, not the person using it on a quiet afternoon.

28 July 2026
Marketplace takedown pressure on vendor operations

Marketplace takedowns do more than pull a site offline, they cut through the vendor routines that keep sales moving. In dark web marketplaces, that...

28 July 2026
Brickstorm persistence in Microsoft 365

Brickstorm showed how Microsoft 365 persistence can survive a tidy password reset and a few blocked logins. I keep coming back to the same point, if...

27 July 2026
Restricting Serv-U access before patching

The SolarWinds Serv-U flaw is the sort of bug that turns a routine patch into an ugly afternoon, so I would block the obvious request pattern first...

Latest blog posts you might like

24 February 2026
Logging and auditing AI actions in your homelab

Log every AI action, store structured JSON events, and protect the audit trail so you can trace changes and roll them back. These practical steps make AI management in your homelab visible, reversible...

24 February 2026
Security Advisory – 24 Feb 2026

Daily security advisory summary for 24 Feb 2026, selected for UK homelab and sysadmin readers.

24 February 2026
Securing your homelab with effective VLAN strategies

Unlock the potential of your homelab with effective VLAN configuration. Learn practical steps to enhance security, streamline management, and ensure smooth network function.

24 February 2026
Security Advisory – 24 Feb 2026

Daily security advisory summary for 24 Feb 2026

23 February 2026
Ninja Foodi MAX Dual Zone Digital AirFryer + 3 more Amazon tech bargains

Explore the Ninja Foodi MAX AirFryer and three more tech deals this week.

21 February 2026
Documenting quality checks in neon sign manufacturing

Neon Sign Automation sets repeatable test sequences, links firmware, test logs, photos and manifests to each job, and flags deviations for root-cause tracking. Use short SOPs and versioned...

21 February 2026
Mitigating security risks from AI recommendation poisoning

Reduce risk from AI recommendation poisoning with practical controls you can apply to your assistant today. Log incoming AI links, block anonymous memory writes, record provenance for every memory...

21 February 2026
Security Advisory – 21 Feb 2026

Daily security advisory summary for 21 Feb 2026, selected for UK homelab and sysadmin readers.

20 February 2026
Understanding Siri’s integration issues with home automation

What you see Delays show up quickly once you start using Siri for home automation. The command sits there, the acknowledgement comes late, or the action lands well after you expected it. Sometimes...

20 February 2026
Removing compromised Outlook add-ins to protect your account

Securing Your Outlook Add-ins: Lessons from the AgreeTo Hijack A popular Outlook add-in called AgreeTo was abandoned by its developer and stayed listed in the Microsoft Marketplace. An attacker took...