Things I build, break, fix, and write about

17 September 2026
Require a BitLocker pre-boot PIN

TPM-only BitLocker is tidy until you remember what is left exposed when the machine can unlock itself. BitLocker PINs are the small, awkward step that makes a stolen laptop less cooperative, and I trust that far more than wishful thinking about physical security.

17 September 2026
Secure connectivity principles in water sector OT

Secure connectivity principles only work when the boundary is real, not decorative. I’ve seen too many remote paths that looked neat on paper and fell...

16 September 2026
Monitoring radio, transport and core faults

Private 5G resilience does not come from a cheerful dashboard or a nice radio map. I want to see where the attach failed, which path dropped, and...

16 September 2026
Pre-boot authentication for BitLocker

TPM-only BitLocker is convenient, but convenience is not the same as a proper boundary. BitLocker PINs push that line back to pre-boot, which is where...

Latest blog posts you might like

1 January 2026
VoIP settings for reliable calls on Sophos XGS

Sophos XGS Firewall: optimise VoIP settings for reliable calls. Start by mapping your NAT, public IPs, VLANs, and ports. Lock firewall rules and allow only required SIP and RTP ranges. Mark media...

1 January 2026
Automating static IP-MAC management in Sophos firewall

I get asked this a lot. Someone turns up with a spreadsheet of 200 MACs and IPs and wants those turned into static IP-MAC reservation entries in a Sophos firewall without an afternoon of clicking...

31 December 2025
Configuring inbound TLS/SSL inspection on Sophos XG

Configure inbound TLS/SSL inspection on Sophos XG and XGS. You will learn when to use the Sophos WAF or a reverse proxy. You will see where to bind certificates and how to map public IPs with DNAT....

31 December 2025
Managing CVE-2022-48310 with Sophos Connect

Sophos Connect vulnerabilities, including CVE-2022-48310, may appear on macOS scans. Check your app version, confirm the flagged library with mdls and otool, then follow Sophos guidance or apply...

30 December 2025
Understanding user feedback on Sophos Firewall v22

Sophos Firewall v22 user experiences show Health Check and XDR are key. Back up your configuration, check disk space, and test XDR in a lab before you upgrade. Clean your rule base, enable two-factor...

30 December 2025
Configuring firewall rules in Sophos Firewall v22

Prepare before you upgrade. Check device support and free disk space, back up configs and snapshots. Use clear rule names, narrow objects and specific service ports. Enable logging and review hit...

29 December 2025
Understanding sparse files in Linux environments

Sparse files let you create large logical files that consume little physical disk space until you write data. Use them for VM images, test files or temporary swap, but monitor actual usage with du and...

29 December 2025
Configuring privacy settings in Linux Mint for lawyers

I’ve used Linux Mint on client laptops and for sensitive files. Mint is fine for this sort of job if you configure it properly. Treat the machine as a tool, not a promise. Plan the disk layout, lock...

28 December 2025
Setting up a Linux lab with CachyOS

Linux Lab Configuration: Start with hardware that fits your needs. Create install media and enable virtualization in firmware. Assign static IPs and separate traffic with VLANs. Apply strict firewall...

28 December 2025
Weekly Tech Digest | 28 Dec 2025

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.