Blog
Security When a contractor calls a SIEM “our own product”, it is worth asking what exactly is theirs. In our case the answer is this: ours is the layer on top of an open core, not a rewritten engine.
Digital Device fleets are usually managed with Intune, Jamf or Hexnode, and in most cases that is the right call. We built a self-hosted MDM not because the ready-made ones are bad, but because for our profile
Security A hidden OS is a second encrypted Windows perimeter on the same disk of an ordinary laptop, whose existence cannot be established from the running system, from the bootloader, or from a sector-by-sector disk image.
Security A great deal has been written about Zero Trust, and almost all of it is about principles. It is far more useful to see what those principles turn into under real operation: which decisions get made, what
Security Your phone isn’t a “dialer.” It’s the key to your email, your banks, your messages, your calendar, your location, your microphone and your camera, and you carry it in your pocket 24 hours a day.
Security Telegram lets you sign up with a number that was never issued by a mobile carrier and never lived in a SIM card: a virtual number in the +888 range. People call it “anonymous,”
Digital The usual way to stand up a virtualization cluster is to do it by hand: install each node from a USB stick, click through the wizard, wire the network in the web UI, tweak configs until it works.
Digital The usual way to stand up a server is to do it by hand: order the box, open a remote console, click through the installer, edit a few configs, install the applications. It works, and for one machine it is even fast.
Management Everyone wants to “add AI” to their IT department right now. Most of these projects will fail, and almost never because of the model. They fail because the company never assessed the ground it is building on.
Psychology There is a simple practice some people keep: every day you set aside a little time and deliberately think, about yourself, your health, your spouse, the people close to you, and the people around you.
Security I keep the recovery story of my own crypto security in my own hands. Every tool I’m about to describe runs local-first and offline: it binds to loopback, sends nothing to the cloud, and is built
Digital A few months after I shipped my open-source Home Assistant integration for the Klipsch Flexus, a soundbar over-the-air update killed it. Reads still worked; every write came back 401 Forbidden.