Blog - ilia.ae
Vendor lock-in: a person wheels out a box labelled code while the keys to App Store, Google Play, cloud, domain and payments stay on the wall Digital
Vendor lock-in: what a technical audit should check besides the code
My investor readiness and due diligence service page has a line: “A separate question is how self-contained the product is; behind the interface there is sometimes somebody else’
UAE regulations for tech companies: federal, Dubai, DIFC and ADGM Security
UAE regulations for tech companies: data, cybersecurity, e-invoicing and e-signatures
I work from Dubai Airport Free Zone, and in the article on fintech I wrote that the region’s rules add up to “constraints that must shape your cloud-region choice before the first line of code, not after.”
An AI agent's boundary: a robot at a panel where only read is on, write is locked and delete is chained Digital
An AI agent with access to production: the boundary lives in code, not in the prompt
I run AI agents with access to my site and infrastructure: they edit and publish articles, clean up the media library, rebuild reports, and log into servers over SSH. This article is about where the boundary
Metrics before dashboards: two people pull a sheet reading by invoice and by payment in front of a screen showing 53 with no date Digital
Metrics before dashboards: where a BI project actually starts
The page for my Data Analytics and BI service has a rule: no dashboards until the metric definitions are agreed. Otherwise the argument about numbers simply moves to a new screen. Below is where that rule
iCan glucose sensor: an engineer's desk, the sensor sending three accepted F2 packets to two phones, a refused 1A packet set aside Digital
iCan glucose sensor: how I worked out the start-up algorithm and got the history back
I wear a Sinocare iCan i6 continuous glucose monitor (inside the app it is called t6). A new sensor started behaving oddly: current readings reached the phone, but the sensor refused to hand over its history.
Ceph or ZFS: on the left three servers share one store over a 10 Gbit/s network, on the right each has its own disks and replicates every minute Digital
Ceph or ZFS: what storage a three-node cluster needs
The moment a cluster gets its third node, the question of distributed storage comes up almost immediately, and it usually sounds like Ceph or ZFS. In the Proxmox interface Ceph installs in a few clicks
The OODA loop: a control room with observe, orient, decide and act stations and a bridge from orientation straight to action, bypassing the decision booth Management
The OODA loop: when to think and when to act
The OODA loop comes from the American fighter pilot John Boyd: observe, orient, decide, act. It is usually retold as “cycle faster than your opponent”. What interests me in it is something
An OpenBao secrets store: a safe with five keyholes, three hardware keys, a sealed paper share and a padlock, an unopened HSM box on a shelf Security
OpenBao and Shamir shares: how I built a secrets store
This is an article about a secrets store I have built and not yet opened. The deployment pipeline is finished, all five share holders have passed the rehearsal, and the initialisation ceremony, after which
A reverse proxy on your own hardware: two gatehouses, caddy and traefik, and who owns the certificates Digital
Reverse proxy on your own hardware: Caddy, Traefik and the price of defaults
What belongs in front of your services is not the fastest reverse proxy but the one whose defaults you are willing to live with for three years. Defaults, not feature tables, decide what happens to you
A Kubernetes cluster on bare metal: three nodes behind a default deny fence and four doors that bypass admission control Digital
Kubernetes cluster on your own hardware: building it and locking it down
Most companies that ask me about Kubernetes do not need a Kubernetes cluster. That is the first thing I say on the call, and half of those conversations end there, to everyone’
Go Guard: the command travels from the device, not to it: the agent polls the command server Digital
Go Guard: How a Self-Built MDM Platform Works
An employee left a laptop in a taxi on Friday evening. The machine goes into lockdown from the panel, which also shows whether disk encryption is on and where the device was last seen, and the decision
Infrastructure fleet management: a five-layer model with verdicts from probes Digital
Infrastructure Fleet Management: the Verdict Comes From a Probe
With a dozen servers, the state of the estate lives in an administrator’s head. With hundreds of them spread across providers, hypervisors and containers, infrastructure fleet management stops being