-
Why I threw away my first security lab after one month
My first home security lab grew to 50+ tools in a month and became too tangled to trust. On 23 May 2026 I rebuilt it from scratch in a day, and refused to switch the old one off until both counted the same attacks.
-
From log files to signed dossiers: how my threat-intel pages began
In April 2026 my threat reports were sections of one HTML page. By November a job re-signs 810 of them every six hours. How publishing grew from a Saturday's work to a signed archive, and why its most important page is a correction.
-
My SSH honeypot accepted every password, so it never banned anyone
194 attacker IPs escaped my honeypot's auto-ban for three months because it waited for failed logins. Lessons on ban-on-connect and building a honeypot log pipeline that fails loudly.