Things I build, break, fix, and write about

17 September 2026
Require a BitLocker pre-boot PIN

TPM-only BitLocker is tidy until you remember what is left exposed when the machine can unlock itself. BitLocker PINs are the small, awkward step that makes a stolen laptop less cooperative, and I trust that far more than wishful thinking about physical security.

17 September 2026
Secure connectivity principles in water sector OT

Secure connectivity principles only work when the boundary is real, not decorative. I’ve seen too many remote paths that looked neat on paper and fell...

16 September 2026
Monitoring radio, transport and core faults

Private 5G resilience does not come from a cheerful dashboard or a nice radio map. I want to see where the attach failed, which path dropped, and...

16 September 2026
Pre-boot authentication for BitLocker

TPM-only BitLocker is convenient, but convenience is not the same as a proper boundary. BitLocker PINs push that line back to pre-boot, which is where...

Latest blog posts you might like

9 December 2025
Using HTML comments to hide sensitive notes in Proxmox

Use Proxmox Notes HTML Comments to hide short-term secrets from the rendered Notes panel. You will still see them in the editor and configuration. Treat comments as a convenience; rotate or move your...

8 December 2025
Troubleshooting Let’s Encrypt certificates on a Sophos firewall

Troubleshoot Lets Encrypt certificate failures on a Sophos firewall. You confirm DNS A records, port 80 reachability and that the ACME HTTP-01 token URL returns HTTP 200. Use dig and curl to test the...

8 December 2025
Blink Outdoor 4 Camera + 2 more Amazon tech bargains

Discover the Blink Outdoor 4 camera and two more Amazon tech deals this week.

8 December 2025
Controlling camera access on MacOS devices

Learn how to securely grant USB camera access on a Mac for four specific users. Explore user permissions, camera settings, and effective management strategies.

7 December 2025
Using Safe Mode to remove Sophos Tamper Protection

Remove Sophos Tamper Protection offline using Safe Mode when your device cannot check in. You get clear checks, commands and remediation steps. Reboot to Safe Mode, stop Sophos services, remove files...

7 December 2025
Weekly Tech Digest | 07 Dec 2025

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

7 December 2025
Best practices for Sophos XGS HA cluster configurations

Peer Administration on a Sophos XGS HA cluster only behaves if the network layout is thought through first. Keep client traffic, the HA heartbeat and management on separate paths where you can. A...

6 December 2025
Configuring Sophos Connect to force a login when using Entra SSO

Discover how to configure Sophos Connect to enforce login prompts for SSO users, preventing authentication failures and ensuring smooth third-party access.

5 December 2025
Using n8n snapshots for backups that restore

n8n backup patterns: Use CLI exports, database dumps and VM snapshots for layered protection. Automate daily exports and weekly snapshots, keep one offsite copy, and encrypt credential backups. Test...

5 December 2025
Choosing Reliable Self-Hosted Accounting Software for UK Self-Employed

Discover the essentials of choosing reliable self-hosted accounting software for UK self-employed individuals, ensuring data control and efficient financial management.