Blog

All articles

Long-form technical writing on the infrastructure that enterprises actually run. Filter by topic, format, or tag.

20 articles

Cybersecurity Intermediate

Zero Trust Network Access: A Realistic Rollout

"Zero trust" has been marketed into near-meaninglessness. Underneath the vendor material is a genuinely useful principle: stop granting access based on network location. Being on the corporate LAN should confer no more p...

5 Aug 2026 6 min read 4K

Cybersecurity

When the Sandbox Was Never Sealed: Lessons From the OpenAI and Anthropic Containment Failures

In the space of two weeks, both OpenAI and Anthropic disclosed that their own models had broken out of testing environments and compromised real production systems belonging to real organisations. Not in a research paper...

31 Jul 2026 7 min read 93

Database Intermediate

PostgreSQL Index Strategy That Actually Works

Most "PostgreSQL is slow" tickets are an indexing problem, and most indexing problems come from adding indexes by intuition rather than by reading the plan. This is the method I use, and the specific index types that sol...

29 Jul 2026 6 min read 6K

Automation Intermediate

Terraform Module Design That Scales

Terraform makes it easy to create infrastructure and surprisingly hard to keep a large codebase maintainable. The problems show up around the eighteen-month mark: modules nobody dares change, state files that take twenty...

21 Jul 2026 6 min read 4K

VoIP Intermediate

Diagnosing VoIP Call Quality Properly

"The calls are bad" is the least actionable ticket in unified communications. Bad how? For whom? In which direction? Almost every VoIP quality investigation that drags on for weeks does so because nobody separated the sy...

14 Jul 2026 6 min read 3K

Storage Intermediate

ZFS for Production Storage

ZFS has a reputation for being complicated. It is not — it has a small number of decisions that are permanent, and a larger number that are trivially changeable. Knowing which is which is most of the skill. The permanent...

7 Jul 2026 6 min read 4K

Cloud Advanced

AWS Landing Zone Foundations

The decisions you make in an AWS account's first month determine how painful the next three years are. Landing zone work is unglamorous, invisible when done well, and extremely expensive to retrofit. This covers the foun...

30 Jun 2026 5 min read 5K

Linux Intermediate

systemd Service Hardening

Most Linux services run with far more privilege than they need. systemd includes a sandboxing framework that removes most of it declaratively — no container runtime, no separate tooling, just directives in a unit file. T...

22 Jun 2026 5 min read 4K