With UniFi Network 11, UniFi is now Matter aware. You can add your Matter and Thread devices to UniFi and see them next to the rest of your clients, including the Thread channel and signal strength.…

GDPR isn’t just pop-ups

PowerShell commands and actual event-log excerpts from a Windows freeze: 36-second file I/O delays, disk activity, and the limits of the evidence. Continue reading.

Weekly activity summary across 25 curated bulletproof hosting ASNs, covering global scanning behavior and infrastructure changes.

The objective was simple: Build a home server with ECC memory, lots of space for NVMe drives and 3.5” hard drives, fast Ethernet networking, and as low a power draw as possible. As it happened, this…

Test whether your previous release can read and write changed production state before treating a code rollback as a recovery plan.

Hi there,Here's what went up on richardlemon.com this week:Who actually reads my llms.txt?Using Nginx access logs to see which crawlers touch llms.txt and llms-full.txt, and what that does and…

If you don't understand Docker yet, read How to Install Docker on Windows and/or How to Install on Synology SRM first. - Once you've got Docker installed, here's some apps that I think will be most…

Not so long ago, during my times as a Consultant / Forward Deployed Engineer (before FDE was a thing) I was part of a full blown rewrite for a mobile application, everything was being rebuilt, from…

Introduction I have two locations, which I affectionately call SiteA and SiteB . Both run UniFi Dream Machines. Years ago, I drank the UniFi Kool-Aid, and now I'm so deeply invested in their…

The other day I opened my terminal and noticed I was mike@Clearpeak. Considering this was my work computer (and Liquid Light is nothing like Clearpeak) alarm bells started ringing. Before I engaged…

A simple and secure way to create SSH keys on a Mac's Secure Enclave with Touch ID protection

Putting the orchestrator, session state, and code sandbox in one container creates slow, fragile pets. Split them into three planes with separate lifecycles.

My home server is a small mini PC running Debian. It holds the file shares, Time Machine backups, Gitea, a music server and a few small apps of my own. Like most home servers it grew by hand over the…

🦸 Community Superhero Our community superhero this week is Eyal Estrin, VP of Cybersecurity at JPMorganChase. Eyal is a prolific writer, having published two books on cloud security and dozens of…

I always wanted to give making a new VPN/proxy protocol a shot to understand what happens at the packet level to evade censorship or make a secure tunnel to a server, and to see what it takes to…

Two things I’m thinking about this. One is about what level of granularity you should have agents watching the system. You can’t watch at a super high product level, but watching at a super minute…

Search Console deletes data after 16 months and never backfills a gap. We lost three months at the bookstore to a stoppage nobody noticed. Both businesses now archive it nightly to our own database,…

Dev now runs on two Fedora machines built from one dotfiles repo: my laptop, and a headless NUC that runs long Claude sessions while I am away. Next it hosts a scrubbed copy of production, because…

PAM Mastery by Michael W Lucas, Chinese Review Table of Contents 1. Review 1.1. 关于技术手册 1.1.1. 我如何发现了这本书？ 1.1.2. 为什么我决定阅读它？ 1.1.3. 技术书与官方的说明书和网上HOWTO相比有什么特点？ 1.1.4. 通过卖出技术书作者是否会赚钱？ 1.2. 关于PAM技术 1.2.1.…

Since I stood this blog up ~ten years ago, I’ve been a loyal Mailchimp user - I embedded their signup form in the footer of my site, maintained an audience of subscribed users, and had it…

ColdFusion’s October 2026 update silently skipped my scheduled tasks while they still showed Active. How to find the block, why a hosts file causes it, and the fix.

Managing outbound internet traffic from a Kubernetes cluster is crucial when applications need to communicate with external APIs protected by strict firewalls. By default, Azure Kubernetes Service…

CES S3 Performance: Round-Robin vs. Bucket-Sticky Routing

The NexusCorp Employee Portal appears to be a typical internal application with authentication controls and role-based access in place. However, multiple small weaknesses, ranging from…

Internet is all but a necessity today. For a home office it is even more important. I recently set up a TMobile Backup Internet gateway and enabled automatic failover with my Mikrotik home network.…

If you are using Unix Domain sockets on Linux, and you are not accepting file descriptors from these Unix Domain Sockets (which is the common case), you should probably disable the SO_PASSRIGHTS…

Learn how to install Open WebUI with Ollama on Debian using Docker, connect local LLMs, create users, manage model access, and secure remote access.

Drop AZURE_CREDENTIALS: set up Azure workload identity federation for GitHub Actions with Terraform, immutable subjects, and AADSTS700213 fixes.

A few days ago systemd gained tools which allow you to monitor Varlink traffic. A new Varlink service (io.systemd.VarlinkMonitor) allows you to set up a ring buffer which will get filled with packets…

Microsoft patched 1,413 vulnerabilities this week, more than it ever patched in a full year. The count doesn’t tell you how broken Windows is. It tells you how hard somebody looked. And once…

In my recent blog posts (1, 2, 3 and 4), I have shown how Docker Sandboxes and Kits can be used to securely let an agent work on Business Central development with the AL MCP Server and the Azure…

Let's get this out of the way first - this is a terrible idea! I want my two-factor authentication codes to be easily accessible to me, so I've built a watch app which will display them.…

If you’re a regular reader of this blog, you’ve probably expected the 3rd part of the “I got myself a magic lamp …” series - no worries, it’s coming (in more…

Discover the privacy toolbox! Essential tools to keep your data private online.

30 years of open source database evolution — a talk at All Things Open 2026, Raleigh Convention Center, October 19-20.

Understand UEFI Secure Boot in Linux. Learn how it works and follow this step-by-step guide to easily configure Secure Boot using systemd-boot.

Conditional Access Plans group rules under shared conditions and start Off. See what the Entra preview reveals, and what Microsoft has not confirmed. The post What are Conditional Access Plans?…

The two-leg auth pattern (your identity provider for who the user is, OAuth for the downstream API) only describes one person when the downstream's SSO is federated to that identity provider. Without…

I. INTRODUCTION During red teaming or penetration testing, we often need to perform stealth injection between processes. To do so, we must avoid detection and intervention by Endpoint Detection and…

Use ordered SQL migrations on client and server, validate schema history and handle skipped releases. Understand baselines, repeatable scripts and…

If you have built an application with an interactive map, you know what you are in for. You pick a tile provider such as Google or Mapbox, or a self-hosted stack like GeoServer or Martin, and your…

Our Composer vendor cache is keyed on the composer.lock file, which means every time a dependency changes, the cache gets thrown away and Composer downloads every package from scratch. With Renovate…

Your app runs at the edge and cannot make a PDF. Here is the whole path from that problem to a running container, including the failed deploys, and why the...

#screen .csb-fig { margin: 26px auto; width: 100%; max-width: 68ch; clear: both; } #screen .csb-fig.csb-float-right { float: right; clear: right; width: 210px; max-width: 35%; margin: 4px 0 16px…

Get in bitches, we're crashing Leopold's AI fund again

I consider learning how to script or automate things among the most important investments developers can make early in their career. The progression for a lot of people was learning to write scripts…