Things I build, break, fix, and write about

22 April 2026
Security Advisory – 20 Apr 2026

Daily security advisory summary for 20 Apr 2026

21 April 2026
Privacy-first car telemetry: monitoring EV charging over

I took a glossy EV launch page and turned the useful bits into a Home Assistant MQTT car charging dashboard, then spent most of the time fighting the...

21 April 2026
Security Advisory – 19 Apr 2026

Daily security advisory summary for 19 Apr 2026

20 April 2026
Tagging and storing classic car data in a self-hosted

A self-hosted inventory tracker only behaves if the data model stays boring, and boring is exactly what I want when I am digging out chassis numbers...

Latest blog posts you might like

17 April 2026
Security Advisory – 17 Apr 2026

Daily security advisory summary for 17 Apr 2026

16 April 2026
Security Advisory – 16 Apr 2026

Daily security advisory summary for 16 Apr 2026

16 April 2026
Self-hosted automation: designing for reproducible builds

A dark lab build only works when the same input gives the same image every time, and an automated build pipeline is only useful if it is boring in all the right places. Pin everything, trust nothing...

15 April 2026
Security Advisory – 15 Apr 2026

Daily security advisory summary for 15 Apr 2026

15 April 2026
ACL permission models that break as infrastructure grows

I’ve lost enough evenings to home lab automation pitfalls to know the real trouble starts with small defaults, not big failures. ACL permission models that break as infrastructure grows are usually a...

14 April 2026
Moving keepsakes offsite without losing local Nextcloud

I keep Nextcloud for daily use, but the real safety net sits off the box. A digital keepsakes backup strategy only starts to make sense when restores are boring, not hopeful, and I have learned not to...

14 April 2026
Security Advisory – 14 Apr 2026

Daily security advisory summary for 14 Apr 2026

13 April 2026
Tenant isolation failures expose financial metadata leakage

Multi-tenant data isolation failures happen when scope checks live at the presentation layer instead of the query layer. Lloyds learned this the hard way; I'll show you why it matters in your homelab...

13 April 2026
Amazon Fire TV Stick HD and 2 more Amazon tech bargains

Discover the Amazon Fire TV Stick HD and more tech deals this week.

12 April 2026
Isolating n8n in Docker: network policies and backup

Running n8n in your homelab without proper isolation is a liability. CVE-2025-68613 lets authenticated users execute code with container privileges; if that container sits on your default Docker...