Blog

Five minutes on Kali, five hours on Qubes. The default route that kills your internet, where the DNAT rule belongs, and the mistakes I made getting there.

Measured, not guessed: qube start times, memory use across two sessions, and what CPU load actually costs on 2018 hardware running Qubes 4.3.1.

A first look at the NitroPad T480: Coreboot, Heads measured boot, a disabled Intel ME, and what a review unit without a tamper seal can and can’t demonstrate.

First impressions of the YubiKey 5C Nano and 5C NFC after a week: a fixed key that never leaves the desk, a mobile one that goes everywhere, and why the pair covers each other.

Why WebAuthn fails on a self-hosted Vaultwarden instance, and how to tell a server-side domain problem apart from a browser-side one.

Hands-on with the LattePanda Mu (Intel N100) on the Lite Carrier Board: the compute-module approach to a small x86 homelab, what it does well, and where the Lite Carrier’s limits show.

Why I run a vision-capable LLM entirely on-device: Gemma 4 26B A4B in LM Studio, and the privacy reasoning behind keeping it off the cloud.

A hands-on review of the ZimaBoard 2 832 from a homelab and security angle: Intel N150, dual 2.5GbE, near-silent with the included fan. What it’s good at, and where its limits are.

A practical setup for running Vaultwarden on ZimaOS with HTTPS through Cloudflare Tunnel, without router port forwarding.