Things I build, break, fix, and write about

17 September 2026
Secure connectivity principles in water sector OT

Secure connectivity principles only work when the boundary is real, not decorative. I’ve seen too many remote paths that looked neat on paper and fell apart the moment someone needed to patch a PLC at 2am; that is usually where the trouble starts.

16 September 2026
Monitoring radio, transport and core faults

Private 5G resilience does not come from a cheerful dashboard or a nice radio map. I want to see where the attach failed, which path dropped, and...

16 September 2026
Pre-boot authentication for BitLocker

TPM-only BitLocker is convenient, but convenience is not the same as a proper boundary. BitLocker PINs push that line back to pre-boot, which is where...

15 September 2026
Single-sided BPool joins drain mOCEAN via SideStaking

Ocean Protocol BPool single-sided join exit math is where this one falls apart, and I have a soft spot for bugs that look tidy until another contract...

Latest blog posts you might like

21 February 2026
Documenting quality checks in neon sign manufacturing

Neon Sign Automation sets repeatable test sequences, links firmware, test logs, photos and manifests to each job, and flags deviations for root-cause tracking. Use short SOPs and versioned...

21 February 2026
Mitigating security risks from AI recommendation poisoning

Reduce risk from AI recommendation poisoning with practical controls you can apply to your assistant today. Log incoming AI links, block anonymous memory writes, record provenance for every memory...

21 February 2026
Security Advisory – 21 Feb 2026

Daily security advisory summary for 21 Feb 2026, selected for UK homelab and sysadmin readers.

20 February 2026
Understanding Siri’s integration issues with home automation

What you see Delays show up quickly once you start using Siri for home automation. The command sits there, the acknowledgement comes late, or the action lands well after you expected it. Sometimes...

20 February 2026
Removing compromised Outlook add-ins to protect your account

Securing Your Outlook Add-ins: Lessons from the AgreeTo Hijack A popular Outlook add-in called AgreeTo was abandoned by its developer and stayed listed in the Microsoft Marketplace. An attacker took...

19 February 2026
Configuring Screenless Devices for Schools

Unlock the potential of screenless devices in education by minimising distractions and enhancing productivity. Discover effective setup and management strategies in this comprehensive guide.

19 February 2026
Firewall rules for model extraction attempts

Firewall rules for model extraction attempts AI models exposed over APIs get probed. A lot. Sometimes that is just noisy curiosity. Sometimes it is patterned traffic meant to map out model behaviour...

18 February 2026
Integrating AI software configurations in your homelab

Plan and version your homelab so AI software configurations remain reproducible, secure and easy to roll back. You should automate provisioning and testing, segment workloads on separate VLANs and...

18 February 2026
Assessing collision risks for AWS Outpost deployments

You should check telemetry for attitude alerts, sudden shutdowns, thermal spikes and short comms blackouts to identify collision risks for AWS Outpost deployments. Record exact timestamps, correlate...

17 February 2026
Training users to avoid LNK file threats

Mitigate Windows LNK file risks effectively by implementing key security measures and user training. Protect your system from shortcut vulnerabilities today.