gavinj.net

Thoughts on technology, infrastructure, and AI

Viewing posts tagged security Clear filter

19 posts found

PowerDNS: DNS Without the Archaeology

August 13, 2026 • powerdns, poweradmin, dns

A look at PowerDNS, the excellent Poweradmin web interface, and a design for sharing centrally managed zones across several isolated security domains.

A Drop Bear Before Boot: Unlocking LUKS over SSH on Ubuntu 26.04

August 3, 2026 • linux, ubuntu, ssh

My encrypted server was secure right up until it rebooted and waited for a passphrase nobody could type remotely. Dropbear gave me a tiny SSH server inside the initramfs and a safe way to unlock LUKS from elsewhere.

Essential Eight on Linux, Part 8 of 8: Regular Backups on Ubuntu 26.04 LTS

May 5, 2026 • essential-eight, asd, ism

Part 8 of an 8-part series on implementing the Essential Eight on Ubuntu 26.04 LTS, covering regular backups with restic, snapshots, immutable storage, and Linux-first recovery design.

Essential Eight on Linux, Part 7 of 8: User Application Hardening on Ubuntu 26.04 LTS

May 4, 2026 • essential-eight, asd, ism

Part 7 of an 8-part series on implementing the Essential Eight on Ubuntu 26.04 LTS, covering browser and user application hardening with Firefox policies, snap confinement, AppArmor, and isolation controls.

Essential Eight on Linux, Part 6 of 8: Restrict Microsoft Office Macros on Ubuntu 26.04 LTS

May 1, 2026 • essential-eight, asd, ism

Part 6 of an 8-part series on implementing the Essential Eight on Ubuntu 26.04 LTS, covering the awkward Microsoft Office macro control gap on Linux and the best compensating patterns.

gav.ilicio.us

neat-annotations: Hand-drawn CSS annotations
Hand-drawn arrows and handwritten callouts for the web, all in one CSS file. No JavaScript, no build step—just a little personality for your page.
Telstra Outage: The Night a Network Decided the Year Was 2006
One bad GPS clock, one NTP timing loop, and Telstra's network thought it was 2006. Certs, DNS, time—the sysadmin trifecta strikes again, with time taking the lead.
Bonsai 2 27B
Another model for the local-AI shortlist: PrismML says ternary weights shrink Qwen3.8 27B to 5.9 GB while retaining 98.2% of its benchmark score.
My AI Agent That Loves to Talk to Scammers
Scammers have AI callers now, so Paul Nevin built an AI honeypot to keep them talking and map their playbook. Some things never change—only the tools.
fugleramme: E-Ink Bird Frame for Raspberry Pi
A Raspberry Pi identifies garden birds by sound using local AI, then displays them on e-ink as hand-cut 19th-century illustrations. Delightful.
Ubuntu 26.10 Completes Transition to Rust-Based Coreutils
Ubuntu 26.10 finishes replacing GNU coreutils with memory-safe Rust uutils—including cp, mv, and rm. A quiet, drop-in security upgrade.
Alternatives to MinIO for Single-Node Local S3
MinIO's licensing and stewardship upheaval has kicked off the hunt for a replacement. This practical bake-off puts SeaweedFS and S3Proxy near the front.
Tesla says it will finally unveil the second-generation Roadster on October 1
After years of delays, Tesla says the second-generation Roadster will finally be unveiled on October 1. Flying cars! The future envisaged in my youth is finally arriving ...
Oracle layoffs: Employees receive the 6am job cuts email from "Oracle leadership" again
Oracle has started another round of job cuts, and once again the news arrived as a 6am email from "Oracle leadership". My heart goes out to the affected employees - a 6am email is a very cold way to part ways. I wrote about this pattern back in March in AI Layoffs in Australia and the Contractor Anxiety They Create, and nothing about it has become more humane since.
Lifespan
After a few weeks listening to David Sinclair's podcast, I'm tempted to subscribe to Lifespan magazine. The future of longevity research is looking extraordinary.