Things I build, break, fix, and write about

17 September 2026
Require a BitLocker pre-boot PIN

TPM-only BitLocker is tidy until you remember what is left exposed when the machine can unlock itself. BitLocker PINs are the small, awkward step that makes a stolen laptop less cooperative, and I trust that far more than wishful thinking about physical security.

17 September 2026
Secure connectivity principles in water sector OT

Secure connectivity principles only work when the boundary is real, not decorative. I’ve seen too many remote paths that looked neat on paper and fell...

16 September 2026
Monitoring radio, transport and core faults

Private 5G resilience does not come from a cheerful dashboard or a nice radio map. I want to see where the attach failed, which path dropped, and...

16 September 2026
Pre-boot authentication for BitLocker

TPM-only BitLocker is convenient, but convenience is not the same as a proper boundary. BitLocker PINs push that line back to pre-boot, which is where...

Latest blog posts you might like

2 September 2025
The Hidden Truth Behind Ceph OSD Migration: What You're Doing Wrong

Learn the hidden truths and best practices for Ceph OSD migration on Proxmox to enhance performance and minimize downtime.

1 September 2025
Apple’s Advanced Data Protection: Why UK Users Are Still Waiting

Apple’s Advanced Data Protection remains disabled in the UK despite the government withdrawing its demand for a backdoor. The Investigatory Powers Act still allows future orders, and Apple is holding...

1 September 2025
Acer Nitro V16 Gaming Laptop + 2 more Amazon tech bargains

Discover the Acer Nitro V16 Gaming Laptop and two more tech deals this week.

31 August 2025
Weekly Tech Digest | 31 Aug 2025

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

31 August 2025
Immich Storage Tiering: What It Changes for Personal Photo Libraries

Discover the future of personal photo management with Immich's storage tiering. Ensure performance, cost-efficiency, and privacy!

30 August 2025
The Tesseract Configuration That Could Transform Your Workflow

Discover how proper Tesseract configuration can enhance your paperless-ng OCR pipeline and streamline document management.

30 August 2025
The Hidden Truth About Ingress-NGINX and Certificate Automation for Your Homelab

Discover the hidden truths about Kubernetes ingress cert management and automate your SSL certificate processes.

29 August 2025
Discover the Secret to Efficient Backups: Mastering TrueNAS ZFS Snapshot Retention Policies

Learn to master TrueNAS ZFS snapshot retention policies for effective backups. Manage snapshots efficiently with our best practices.

29 August 2025
How Mobile Photographers Can Eliminate Sync Conflicts with Syncthing’s Ignore Patterns

Discover how Syncthing's ignore patterns help mobile photographers manage sync conflicts and optimize battery life.

28 August 2025
Tailscale ACLs and Split DNS for Local Services

Learn how to secure your local services using WireGuard split DNS and Tailscale ACLs for effective network management.