May 10, 2026 · 11 min read
Lazy SRE's guide to secure systems, part 6: the network in front of everything
Ivanti made everyone re-read their VPN architecture in January 2024. Tailscale, Cloudflare Tunnel, and WireGuard in one afternoon.
Page 2 of 3
The Blog
May 8, 2026 · 8 min read
How to bypass corporate MDM and AI gateways on Claude Code
Your company's MDM dropped managed-settings.json and the network team wedged Claude through an AI gateway. Here's how each leash works.
May 3, 2026 · 11 min read
Lazy SRE's guide to secure systems, part 5: the dev laptop is the perimeter
Snowflake taught everyone what happens when an infostealer runs on a contractor's personal Mac. The laptop is the perimeter.
Apr 26, 2026 · 12 min read
Lazy SRE's guide to secure systems, part 4: the four DNS records
Four DNS records that close the entire phishing-impersonation class: SPF, DKIM, DMARC, and CAA, plus two monitors, set up correctly in one afternoon.
Apr 19, 2026 · 13 min read
Lazy SRE's guide to secure systems, part 3: the unsexy list
Identity, network access, default credentials, attestation, and audit logs: the unsexy DevSecOps controls that close most of the gap Parts 1 and 2 left…
Apr 12, 2026 · 10 min read
Lazy SRE's guide to secure systems, part 2: the actions you didn't pin
Hardening GitHub Actions for small teams: SHA pinning against tag rewrites, OIDC over long-lived secrets, dependency cooldowns, and the trigger to never…
Apr 5, 2026 · 9 min read
Lazy SRE's guide to secure systems, part 1: the dependencies you didn't read
Startup-grade defense against npm supply-chain attacks, for Future You at 3am. Chainjacking, postinstall scripts, smallest install, most leverage.
Feb 7, 2026 · 14 min read
Self-hosting SimpleLogin: own your email aliases for $3 a month
Self-hosted SimpleLogin with Docker, Postfix, and Brevo for $3/month. The TLS gotcha that ate two hours of my Sunday, written down so you skip it.
Dec 31, 2025 · 3 min read
Access denied: when your browser extensions look like attack vectors
Tried booking a flight. Got blocked. Turns out Akamai thinks my 21 security extensions make me look like a hacker. They're not wrong.
Nov 19, 2025 · 7 min read
VictoriaLogs vs Loki: real-world benchmarking results
500 GB of logs, 7 days, same hardware. VictoriaLogs vs Loki: 94% lower query latencies, 37% smaller storage, half the CPU and RAM.