Notebook
What I'm learning and testing: cloud security, zero trust, pentesting, and my home lab.
10 articles
My home lab: an HP Z440 with a few different jobs
Proxmox, local AI, and Plex on one HP Z440, plus the network around them. What I run and what I want to learn next.
Start hereHome labNetworkingAI securityPersistence: what I'd look for after an attacker gets in
A suspicious startup entry is only a lead. The work is finding out who created it, what it runs, and whether it comes back after cleanup.
Incident responseMalwarePersistenceAI agents and OpenClaw: what the agent is allowed to do
An agent with tools can change real systems. I care more about the authority we give it than about a prompt telling it to behave.
AI securityArchitectureCAN bus security: learning the messages before the attacks
CAN is a good place to study what makes a message trusted. I'd start in a small virtual lab, with no real vehicle involved.
PentestingIoTAutomotiveZero trust and SASE: what I'd check before switching
A different access product won't fix an unclear policy. I'd start with the applications, identities, and failure paths.
NetworkingArchitectureZero trustGCP security: follow the identity and the reachable path
A long list of findings doesn't tell me what to fix first. I want to understand how exposure, identity, and permissions fit together.
CloudGCPIAMCTF notes: the solve is only part of it
As I build pentesting skills, I want my practice notes to explain the reasoning, the dead ends, and what would matter outside the challenge.
CTFReverse engineeringCryptographyZero trust in industrial IoT: start with the access
A controller can't always run an agent or support modern authentication. That changes where you enforce access, and what you need to test.
ArchitectureIoTZero trustSecurity automation: start with the repetitive part
I'd automate the prep work before I automate any response. A small script should save time without making a security decision harder to review.
AutomationIncident responsePythonHardware security keys: plan the recovery too
I like phishing-resistant authentication. I also want to know what happens when someone loses the key or changes devices.
IAMAuthenticationHardware