Security
Security fundamentals, hardening guides, account protection, safe remote access, endpoint recovery, and practical defensive operations.
DNS Privacy vs DNS Filtering: Stop Mixing Up the JobsNew!!
A DNS guide explaining the difference between encrypted DNS, DNSSEC, Protective DNS, malware filtering, parental controls, and resolver bypass.
SMS MFA Is Going Away: A Household Migration PlanNew!!
A household MFA migration plan for moving from SMS codes to authenticator apps, passkeys, security keys, recovery codes, and carrier protections.
Email Is the Root Account: Lock It Down Before Anything ElseNew!!
A household account-security guide explaining why email controls recovery for banking, password managers, cloud storage, domains, and identity.
What to Do When a Device Hits CISA KEVNew!!
An incident-style response guide for routers, firewalls, VPNs, NAS devices, and other systems that appear in CISA's KEV catalog.
Edge Device Patch Priority PlaybookNew!!
A patch-priority playbook for routers, firewalls, VPN gateways, NAS appliances, and other internet-facing edge devices.
Homelab SSO: Authentik vs Authelia vs Pocket ID
A practical homelab SSO comparison covering Authentik, Authelia, Pocket ID, OIDC, SAML, proxy auth, passkeys, MFA, and recovery planning.
Container Security for Normal Homelabs
A normal-person Docker security guide for exposed ports, privileged containers, Docker socket risk, secrets, rootless mode, user namespaces, and backups.
Securing a Self-Hosted AI Server
A noob-friendly security guide for local AI homelabs: keep Ollama private, use VPN or reverse proxy access, manage accounts and API keys, protect logs, and handle private docs and code carefully.
WordPress Core Under Active Exploitation: Verify the Fix and Rule Out Compromise
Updating WordPress core is only the first step. Use this checklist to verify versions, checksums, users, cron, uploads, logs, WAF data, and rebuild criteria.
Immich as the De-Google Gateway: Great App, Serious Backup Responsibility
Immich can be a fantastic Google Photos alternative, but photos raise the stakes: sync is not backup and restore tests are mandatory.