Things I build, break, fix, and write about

17 September 2026
Require a BitLocker pre-boot PIN

TPM-only BitLocker is tidy until you remember what is left exposed when the machine can unlock itself. BitLocker PINs are the small, awkward step that makes a stolen laptop less cooperative, and I trust that far more than wishful thinking about physical security.

17 September 2026
Secure connectivity principles in water sector OT

Secure connectivity principles only work when the boundary is real, not decorative. I’ve seen too many remote paths that looked neat on paper and fell...

16 September 2026
Monitoring radio, transport and core faults

Private 5G resilience does not come from a cheerful dashboard or a nice radio map. I want to see where the attach failed, which path dropped, and...

16 September 2026
Pre-boot authentication for BitLocker

TPM-only BitLocker is convenient, but convenience is not the same as a proper boundary. BitLocker PINs push that line back to pre-boot, which is where...

Latest blog posts you might like

20 March 2026
Backup retention policy: writing it down saves arguments

A backup schedule that works is not the same as a documented one. When recovery fails and a client asks why their data is gone, a working cron job and a vague memory are not a defence; a policy...

19 March 2026
n8n | stable

n8n 2.12.3: patch fixes leader takeover event emission on mismatch, restores editor command bar workflow search, recommended upgrade

16 March 2026
Object storage encryption at rest in homelab setups

Encryption without object lock is a half-measure. A misconfigured script or compromised service account can still wipe everything, which is why S3-compatible storage on a homelab needs layered defence...

16 March 2026
Ring Outdoor Camera Battery + 2 more Amazon tech bargains

Discover the Ring Outdoor Camera Battery and two more Amazon tech deals this week.

16 March 2026
Document what your backup excludes, not just what it covers

I've built backup jobs that looked fine right up until the restore failed. The gap between what you think is covered and what actually is covered lives in the space where documentation should be;...

16 March 2026
Docker Compose for portable homelab deployments

Vendor lock-in creeps in quietly: a pinned cloud dashboard, a backup tool in a proprietary format, a reverse proxy config hardcoded to an IP nobody wrote down. By the time you need to migrate, the...

15 March 2026
Mitigating Win+X paste attacks with PowerShell settings

Use this blueprint to harden Windows Terminal and PowerShell, reduce exposure and detect post-compromise behaviour. You get clear settings, AppLocker and WDAC guidance, logging checks and audits you...

10 March 2026
Amazon Fire TV Stick 4K Max + 3 more Amazon tech bargains

Discover the Amazon Fire TV Stick 4K Max and three more tech deals for your home.

10 March 2026
Assessing surveillance risks with Microsoft AI tools

Explore the critical landscape of data privacy and compliance in surveillance, focusing on lessons from Microsoft and ICE's increasing data utilisation.

8 March 2026
Fraudulent accounts and proxy services in AI compliance

Navigating the complex landscape of AI compliance is essential. This guide explores lessons from the Anthropic allegations, highlighting key strategies to protect AI systems and data integrity.