Things I build, break, fix, and write about

17 September 2026
Require a BitLocker pre-boot PIN

TPM-only BitLocker is tidy until you remember what is left exposed when the machine can unlock itself. BitLocker PINs are the small, awkward step that makes a stolen laptop less cooperative, and I trust that far more than wishful thinking about physical security.

17 September 2026
Secure connectivity principles in water sector OT

Secure connectivity principles only work when the boundary is real, not decorative. I’ve seen too many remote paths that looked neat on paper and fell...

16 September 2026
Monitoring radio, transport and core faults

Private 5G resilience does not come from a cheerful dashboard or a nice radio map. I want to see where the attach failed, which path dropped, and...

16 September 2026
Pre-boot authentication for BitLocker

TPM-only BitLocker is convenient, but convenience is not the same as a proper boundary. BitLocker PINs push that line back to pre-boot, which is where...

Latest blog posts you might like

26 May 2026
Indexing prompt injection in search results

Search results are not neutral once retrieval gets involved. I keep seeing prompt injection treated as an edge case, when a single poisoned page can steer an answer if the stack is lazy about source...

26 May 2026
Why AI-promoted commencement speeches backfire

AI-promoted commencement speeches fail for the same reason most institutional waffle does, they sound prepared for approval, not for people. Graduates can spot that instantly, and once they do, the...

25 May 2026
Global domain takedown order and DNS controls

A global domain takedown order sounds neat on paper, but the web is stitched together by registries, registrars, proxies, and hosts, each with their own limits. I have seen enough of DNS controls to...

25 May 2026
Home Assistant wall controller for local bulb control

Zigbee wall switch controllers are one of the few smart home bits I trust not to annoy me later. Keep the bulbs live, keep the wall position, and let Home Assistant handle the logic; it feels ordinary...

25 May 2026
Weekly Tech Digest | 25 May 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

24 May 2026
Detecting node contention with Pressure Stall Information

Kubernetes PSI metrics are useful because they show waiting, not just work, and that is where the awkward node problems usually hide. I trust them more than busy-looking charts, but only after I have...

24 May 2026
Topology-aware scheduling with PodGroup and DRA

Kubernetes PodGroup scheduling only makes sense once you stop treating the group as a template trick and start treating it as live state. I like that split, because it forces the scheduler to deal...

23 May 2026
Kubernetes Service externalIPs deprecation and replacements

Kubernetes Service externalIPs has always been a bit too trusting for my taste, and 1.36 finally starts treating it that way. If you still rely on it, now is the time to move the address ownership...

23 May 2026
Mixed Version Proxy during Kubernetes 1.36 upgrades

Kubernetes Mixed Version Proxy is one of those fixes you only notice when it is missing. During a 1.36 control plane upgrade, it stops an older API server from handing out tidy little lies, the sort...

22 May 2026
Weekly Tech Digest | 22 May 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.