Things I build, break, fix, and write about

17 September 2026
Require a BitLocker pre-boot PIN

TPM-only BitLocker is tidy until you remember what is left exposed when the machine can unlock itself. BitLocker PINs are the small, awkward step that makes a stolen laptop less cooperative, and I trust that far more than wishful thinking about physical security.

17 September 2026
Secure connectivity principles in water sector OT

Secure connectivity principles only work when the boundary is real, not decorative. I’ve seen too many remote paths that looked neat on paper and fell...

16 September 2026
Monitoring radio, transport and core faults

Private 5G resilience does not come from a cheerful dashboard or a nice radio map. I want to see where the attach failed, which path dropped, and...

16 September 2026
Pre-boot authentication for BitLocker

TPM-only BitLocker is convenient, but convenience is not the same as a proper boundary. BitLocker PINs push that line back to pre-boot, which is where...

Latest blog posts you might like

13 December 2025
Integrating confession mechanisms in legal AI applications

AI confession mechanisms give clear uncertainty signals for legal and healthcare AI. This guide shows how you spot risks, design machine readable confessions, integrate human review, and test...

13 December 2025
Understanding Apple’s privacy safeguards amid leadership changes

Apple’s senior changes can shift how privacy is defended at product level. Legal and policy moves can change priorities and public positions. Jennifer Newstead is slated to become Apple’s general...

12 December 2025
Negotiate Microsoft 365 renewals to mitigate costs

Microsoft 365 price increases will raise per user bills. This guide shows you how to check SKU counts, measure feature use and negotiate renewals. Use scripts to export exact licence data, reduce...

12 December 2025
Navigating licensing for AI-generated music

Manage licensing for AI-generated music on your homelab. Follow legal checks, tagging, streaming controls, automation hooks, and backup patterns that work. Label generated files, store licences with...

11 December 2025
Addressing shadow IT in Department of Defense communications

Non-Approved Messaging Apps create backchannels that bypass controls, audit trails and record retention. You should deploy an approved messaging tool, enforce mobile device management and use data...

11 December 2025
Choosing ZFS for Proxmox on your NUC

Proxmox Storage Strategies matter on a NUC. I run Proxmox on small hardware all the time, so I will walk you through the choices, trade offs and a practical ZFS setup that fits a two‑slot NUC. I keep...

10 December 2025
kopia | v0.22.3

kopia v0.22.3 updates include defect fixes for compression, new snapshots feature for local filesystem options, and CI/CD improvements by removing ineffective tags.

10 December 2025
Comparing Home Assistant deployment methods in Proxmox

I moved Home Assistant onto Proxmox and ended up weighing two choices: LXC or a full VM. Both run the same smarthome stack, but they behave differently once you start adding hardware and updates into...

10 December 2025
restic | v0.18.1

Restic v0.18.1 brings key bug fixes and improvements, enhancing backup command reliability, error management, and file permission handling for users.

10 December 2025
Using Proxmox Datacenter Manager for homelab setups

Proxmox Datacenter Manager gives you a single interface to monitor and manage multiple Proxmox nodes and clusters in your homelab. You will find steps to deploy PDM on a VM or LXC, create API tokens,...