Things I build, break, fix, and write about

29 July 2026
Headlamp in-cluster deployment and RBAC boundaries

Headlamp in-cluster deployment only makes sense when the UI belongs inside the cluster, and even then the service account should be painfully narrow. I trust the boundary, not the person using it on a quiet afternoon.

28 July 2026
Marketplace takedown pressure on vendor operations

Marketplace takedowns do more than pull a site offline, they cut through the vendor routines that keep sales moving. In dark web marketplaces, that...

28 July 2026
Brickstorm persistence in Microsoft 365

Brickstorm showed how Microsoft 365 persistence can survive a tidy password reset and a few blocked logins. I keep coming back to the same point, if...

27 July 2026
Restricting Serv-U access before patching

The SolarWinds Serv-U flaw is the sort of bug that turns a routine patch into an ugly afternoon, so I would block the obvious request pattern first...

Latest blog posts you might like

30 August 2025
The Hidden Truth About Ingress-NGINX and Certificate Automation for Your Homelab

Discover the hidden truths about Kubernetes ingress cert management and automate your SSL certificate processes.

29 August 2025
Discover the Secret to Efficient Backups: Mastering TrueNAS ZFS Snapshot Retention Policies

Learn to master TrueNAS ZFS snapshot retention policies for effective backups. Manage snapshots efficiently with our best practices.

29 August 2025
How Mobile Photographers Can Eliminate Sync Conflicts with Syncthing’s Ignore Patterns

Discover how Syncthing's ignore patterns help mobile photographers manage sync conflicts and optimize battery life.

28 August 2025
Tailscale ACLs and Split DNS for Local Services

Learn how to secure your local services using WireGuard split DNS and Tailscale ACLs for effective network management.

28 August 2025
5 Predictions About the Future of Home Assistant Automation That’ll Surprise You

Discover 5 surprising predictions for home assistant automation scenes that will shape smart homes. Understand the future trends and innovations.

27 August 2025
Docker Compose Backups with Restic and S3-Compatible Storage

Discover proven strategies for Docker Compose and S3-compatible immutable backups. Secure your data with Restic and ensure integrity with backup verification.

27 August 2025
The Hidden Dangers of Poor VLAN Management in Your Home Lab Environment

Discover the hidden dangers of VLAN mismanagement in home labs, impacts on performance, security, and best practices for OPNsense.

27 August 2025
Proxmox Replication, Snapshots, and Backups: What Actually Matters

Learn how to effectively schedule Proxmox snapshots for reliable backups. Optimize your storage and ensure data integrity.

26 August 2025
ADFS-Based Phishing: What It Looks Like and How to Cut the Risk

Learn the hidden truths of ADFS phishing and key protection strategies. Secure your organization against sophisticated attacks today!

26 August 2025
The Surprising Link Between NYT Strands and Enhanced Focus for Tech Professionals

Discover how NYT Strands puzzles boost focus and productivity for tech professionals. Start your daily routine today!