I told you so.

Observations, predictions, and experiments that probably should have stayed in the lab. Dated and fingerprinted on filing. I keep the receipts so nobody can say they didn't see it coming.

On the record

  1. muster in practice: Active Directory lite, from the directory up 49712f02

    How a small Linux fleet gets one directory, Kerberos logins, trustworthy security logs, a rendered WireGuard mesh, typed host policy and SSH host certificates, and what a real rollout taught.

  2. muster: Active Directory lite for a small Linux fleet e40be44a

    One directory, Kerberos, and a small agent per host: identity, access, security logging and host policy for a handful of Linux servers.

  3. Restore drills 1e99022f

    Backing up two servers so they can be rebuilt, and what rebuilding them found.

  4. Changing the record 1bb26863

    Why start this blog over.

Archive

Two earlier volumes, frozen as they were published with their own designs, and a companion site that runs on its own.

  1. 2010 to 2018 Volume 1 15 entries

    Conference talks on security, risk, and threat intelligence, each with the deck as delivered.

  2. 2022 to 2025 Volume 2 11 entries

    Essays, systems tooling, and fiction. Includes the notes on the unikernel that served this site.

  3. 2026 onward Adversarial Agents separate site

    Autonomous offense and autonomous defense: what changes in an engagement when both sides are agents.