Writing
Blog posts, career reflections, and technical notes.
-
Patch Compliance Is a UX Problem Wearing a Security Costume
Cyber Essentials gives you 14 days to apply critical updates. macOS gives users the ability to say no. Closing that gap has almost nothing to do with security tooling.
-
Running a Federal Tenant Means Refusing the Fast Path
GCC High isn't technically harder than commercial Microsoft 365. It's harder because every shortcut available to you is the thing you're not allowed to do.
-
The Best Security Sensor We Had Was the Ticket Queue
A credential-stuffing attack that showed up as a run of ordinary account lockouts, and why the shape of the victim list mattered more than the volume.
-
Pelican: What I Learned Running My Own Infrastructure
A homelab built on Unraid: separated storage tiers, redundant DNS, real backups, and monitoring. The same decisions I make at work, at a scale where I own every consequence.
-
Everyone Was Logging In Twice and I Just Accepted It
A FileVault and Jamf Connect behavior that made every reboot a two-password event: why it happens, why turning it off means overriding Jamf's own recommendation, and the version of this problem people mix it up with.
-
Building This Site with Astro, GitHub, and Cloudflare
How this portfolio came together: Astro for the build, GitHub for version control, and Cloudflare for the domain and hosting.