Writing

22 Oct 2026 1 min read Build Log
October: the application composer, first release in build

October: the application composer, a local tool that tracks and guides each job application, is in build for its first release.

Read →
22 Oct 2026 1 min read Build Log
October: a GrapheneOS phone with a setup walkthrough, done by the book

October: I am testing whether a GrapheneOS phone sells better with an educational setup walkthrough, after reading the rules first.

Read →
22 Oct 2026 1 min read Build Log
October: every task gets a launch code

October: every task now has a short launch code, typed as a word and a number, that is dry by default.

Read →
22 Oct 2026 1 min read Build Log
October: one screen, no scroll

October: every utility I build now follows one rule, that the next task and its command fit one screen.

Read →
22 Oct 2026 1 min read Build Log
October: the operations board goes live, owner-only

October: every open task of the build now sits on one page of this site, visible to the owner only.

Read →
22 Oct 2026 1 min read Build Log
September: a members area on the site, just after a utilities page

September: the site gained a members' panel and a community page, just after a utilities list, each publishing summaries only.

Read →
28 Jun 2026 3 min read security-notes
SIEM Alert Fatigue: Why Tuning Matters More Than Rules

Most SOCs do not have a detection problem — they have a signal-to-noise problem. Why the tuning loop, not the rule count, decides what gets caught.

Read →
28 Jun 2026 4 min read security-notes
Verified Boot and Secure Elements: What GrapheneOS Gets Right

A relocked bootloader, a hardware root of trust, and a boot chain you can independently verify — how verified boot actually works and why the discrete secure element matters.

Read →
28 Jun 2026 4 min read network
WireGuard vs OpenVPN: A Practical Comparison

Auditability, failure behaviour, and cryptokey routing: the comparison that matters in practice, grounded in running full-tunnel WireGuard on real infrastructure.

Read →
11 Jun 2026 4 min read pentest-methodology
nmap: Beyond the Basics

Everyone runs nmap. Fewer people read it properly. A practical tour of scan types, NSE, output, timing, and evasion.

Read →