Things I build, break, fix, and write about

17 September 2026
Require a BitLocker pre-boot PIN

TPM-only BitLocker is tidy until you remember what is left exposed when the machine can unlock itself. BitLocker PINs are the small, awkward step that makes a stolen laptop less cooperative, and I trust that far more than wishful thinking about physical security.

17 September 2026
Secure connectivity principles in water sector OT

Secure connectivity principles only work when the boundary is real, not decorative. I’ve seen too many remote paths that looked neat on paper and fell...

16 September 2026
Monitoring radio, transport and core faults

Private 5G resilience does not come from a cheerful dashboard or a nice radio map. I want to see where the attach failed, which path dropped, and...

16 September 2026
Pre-boot authentication for BitLocker

TPM-only BitLocker is convenient, but convenience is not the same as a proper boundary. BitLocker PINs push that line back to pre-boot, which is where...

Latest blog posts you might like

16 November 2025
Repurpose SwitchBot button pushers for non-smart devices

Use a SwitchBot button pusher to control your non-smart devices. This guide shows safe mounts, how to measure button travel, scheduling and hub integration. Test alignment, choose non-critical buttons...

15 November 2025
Configuring smart lighting without a neutral wire

Configuring smart lighting without a neutral wire Getting smart lighting working without a neutral at the switch is straightforward enough if you stop trying to make the wall switch do a job it cannot...

15 November 2025
Using Home Assistant for centralised home control

Using Home Assistant for centralised home control I run Home Assistant on a Raspberry Pi as my central controller. I want local control, not another cloud app I need to babysit, and I want a...

14 November 2025
Using scripts for automated login on Sophos systems

Fix captive portal logins with Sophos authentication automation for education networks. You will capture form requests, preserve cookies and tokens, run scripts at boot, and store credentials securely...

14 November 2025
Routing VLAN traffic through IPSec tunnels

Route VLAN traffic through an IPSec Tunnel via head office to a client. You get commands, routing and NAT rules, and test steps to confirm your return paths. Keep configs small; test each change....

13 November 2025
Ensuring secure access via SSL VPN for dual-stack users

SSL VPN Dual Stack can let IPv6 bypass the tunnel and break IP based controls. This guide shows how you can force IPv4, use split DNS, or add IPv6 egress so your remote clients present the office IP...

13 November 2025
Distro hopping: strategies for stability

How to Manage Multiple Linux Distributions Without Losing Your Mind I used to swap distros every few days. That taught me quickly that, without rules, the mess grows faster than patience. The useful...

12 November 2025
Navigating the Linux filesystem for former Windows users

How Linux file structures differ from Windows Linux uses one tree with / at the top. Windows uses drive letters. That is the first thing to get used to. A separate disk shows up as a folder once it is...

12 November 2025
Matching B-roll clips with GPT-5 in n8n

Automating video editing in n8n I set this up to cut the boring bits out of short-form editing. n8n builds a first-pass edit, then I polish it in Final Cut Pro. The workflow here uses a 1-minute...

11 November 2025
Telegram notifications in n8n workflows

This guide shows how to integrate Telegram with n8n workflows for notifications. You will set up a bot, store the token securely, and send test messages. It covers error handling, rate limits, and...