Things I build, break, fix, and write about

29 July 2026
Headlamp in-cluster deployment and RBAC boundaries

Headlamp in-cluster deployment only makes sense when the UI belongs inside the cluster, and even then the service account should be painfully narrow. I trust the boundary, not the person using it on a quiet afternoon.

28 July 2026
Marketplace takedown pressure on vendor operations

Marketplace takedowns do more than pull a site offline, they cut through the vendor routines that keep sales moving. In dark web marketplaces, that...

28 July 2026
Brickstorm persistence in Microsoft 365

Brickstorm showed how Microsoft 365 persistence can survive a tidy password reset and a few blocked logins. I keep coming back to the same point, if...

27 July 2026
Restricting Serv-U access before patching

The SolarWinds Serv-U flaw is the sort of bug that turns a routine patch into an ugly afternoon, so I would block the obvious request pattern first...

Latest blog posts you might like

6 May 2026
Token spend caps for AI APIs

AI token spend caps are one of the few sane ways to stop convenience from turning into a bill I have to explain later. Alerts are useful, but they arrive after the request has already spent the money;...

4 May 2026
Bosch High Pressure Washer EasyAquatak 120 + 2 more Amazon tech bargains

Discover the Bosch High Pressure Washer EasyAquatak 120 and two more tech bargains this week.

30 April 2026
n8n | stable

n8n 2 18 5: hide AI workflows, warn on publishing AI gateway creds, editor fixes, open executions from Connect usage, OpenAI dynamic image models

28 April 2026
Testing Proxmox restores before you rely on them

A green job in a Proxmox backup guide means very little until the restore boots, logs in, and serves traffic. I have trusted the dashboard before, only to find the archive was fine and the recovery...

27 April 2026
Network segmentation for vehicle telemetry in Home Assistant

Modern cars are noisy little computers, and vehicle telemetry isolation only works if you treat them that way from the start. I put the car on its own VLAN, lock the firewall down, then let Home...

26 April 2026
Isolating Android on a VLAN with firewall rules and DNS split

I would not migrate an Android phone into my homelab blind. A clean Android homelab firewall DNS split, with VLAN isolation and hard DNS rules, keeps the phone useful without letting it sniff around...

26 April 2026
Security Advisory – 24 Apr 2026

Daily security advisory summary for 24 Apr 2026

25 April 2026
Setting lifecycle tracking for kitchen appliances with Home Assistant

I stopped treating appliance failure as a surprise and built a Home Assistant replacement schedule around dates, run counts, and service history. It is plain, slightly dull, and far more useful than...

25 April 2026
Security Advisory – 24 Apr 2026

Daily security advisory summary for 24 Apr 2026

24 April 2026
Network segmentation with VLANs, DNS and firewall rules

A proper network blueprint is mostly unglamorous discipline, VLANs with a job, DNS that stays in its lane, firewall rules that mean something, and DHCP reservations that do not rely on memory. Get...