Things we break, build, and think about.

Field notes from offensive security engagements, developer tools, and infrastructure ownership — the stuff nobody tells you until it's too late.

Latest Posts
I Got Into Your Datacenter With a Clipboard.

A collared button-up, dark slacks, polished leather shoes, a clipboard, and about forty bucks of hardware will out-perform a six-figure firewall almost every time. Here's how a physical pentest actually goes — and the part nobody writes about: how you leave.

Read post
FourDollarVPN.

Ninety seconds from nothing to a hardened personal WireGuard VPN on DigitalOcean, for about $4 a month. No config files, no SSH gymnastics, no commercial provider you have to take at their word.

Read post
Meet ForkOff, the GitHub Backup You'll Forget Is Running.

GitHub can suspend your account without warning. ForkOff is a free, open-source tool that mirrors all your repos locally every day — so it doesn't matter if they do.

Read post
You Don't Own Anything — Here's How to Fix That.

Your code is on GitHub. Your DNS is on Cloudflare. Your email is on Google. Your deployments are on Vercel. What do you actually control? Less than you think.

Read post