Things I build, break, fix, and write about

29 July 2026
Headlamp in-cluster deployment and RBAC boundaries

Headlamp in-cluster deployment only makes sense when the UI belongs inside the cluster, and even then the service account should be painfully narrow. I trust the boundary, not the person using it on a quiet afternoon.

28 July 2026
Marketplace takedown pressure on vendor operations

Marketplace takedowns do more than pull a site offline, they cut through the vendor routines that keep sales moving. In dark web marketplaces, that...

28 July 2026
Brickstorm persistence in Microsoft 365

Brickstorm showed how Microsoft 365 persistence can survive a tidy password reset and a few blocked logins. I keep coming back to the same point, if...

27 July 2026
Restricting Serv-U access before patching

The SolarWinds Serv-U flaw is the sort of bug that turns a routine patch into an ugly afternoon, so I would block the obvious request pattern first...

Latest blog posts you might like

3 January 2026
Installing Proxmox on a Dell OptiPlex 3050 Mini PC

Proxmox on Dell OptiPlex 3050: Use a 3050 Mini PC to run small VMs on NVMe with better single‑thread performance. You will adjust BIOS, configure LVM‑thin storage, set a bridged NIC, apply firewall...

3 January 2026
Understanding GPU passthrough support in Proxmox

I use Proxmox CLI GPU Passthrough when I need raw GPU power inside a VM. This keeps the noise down and gets straight to the checks that matter. I’m assuming a single Proxmox host on a recent Proxmox...

2 January 2026
Creating automation scenes for your smart lock

Smart Lock Automation with Home Assistant keeps your door control local and secure. You get concise automation scenes, presence checks and door sensor safeguards you can copy. Learn testing steps,...

2 January 2026
Configuring Modbus for home automation

Modbus home automation guide. You will wire RS-485 correctly, map coils and registers, and assign unique slave IDs. You will test with a single node, check termination and parity, and log CRC errors....

1 January 2026
VoIP settings for reliable calls on Sophos XGS

Sophos XGS Firewall: optimise VoIP settings for reliable calls. Start by mapping your NAT, public IPs, VLANs, and ports. Lock firewall rules and allow only required SIP and RTP ranges. Mark media...

1 January 2026
Automating static IP-MAC management in Sophos firewall

I get asked this a lot. Someone turns up with a spreadsheet of 200 MACs and IPs and wants those turned into static IP-MAC reservation entries in a Sophos firewall without an afternoon of clicking...

31 December 2025
Configuring inbound TLS/SSL inspection on Sophos XG

Configure inbound TLS/SSL inspection on Sophos XG and XGS. You will learn when to use the Sophos WAF or a reverse proxy. You will see where to bind certificates and how to map public IPs with DNAT....

31 December 2025
Managing CVE-2022-48310 with Sophos Connect

Sophos Connect vulnerabilities, including CVE-2022-48310, may appear on macOS scans. Check your app version, confirm the flagged library with mdls and otool, then follow Sophos guidance or apply...

30 December 2025
Understanding user feedback on Sophos Firewall v22

Sophos Firewall v22 user experiences show Health Check and XDR are key. Back up your configuration, check disk space, and test XDR in a lab before you upgrade. Clean your rule base, enable two-factor...

30 December 2025
Configuring firewall rules in Sophos Firewall v22

Prepare before you upgrade. Check device support and free disk space, back up configs and snapshots. Use clear rule names, narrow objects and specific service ports. Enable logging and review hit...