fail2ban had 808 addresses banned and the attack had not slowed down. Four out of five sources never make more than five attempts, so a per-address counter never fires. The username is the field they cannot rotate: …
Some software checks whether it is running in a virtual machine and changes what it does when it is - malware goes quiet, anti-cheat refuses to start. This is the week I spent making a KVM guest answer no, down to one …
My last VM-detection post ended on one check I could not beat, and the fix I wrote down was to pass a real GPU through. So I passed the one nobody uses - the integrated GPU in the APU. It works, once you extract a …
RAG over your notes gives an AI a pile of text. A knowledge graph gives it entities and relationships. Here is how I build one only from my own words: collect, extract triples, dedupe, normalise, and read and write it …
Five layers on top of a local model: a single-slot model swap, model tiering, narrow agents with isolated context, skills that wrap an API as one tool call, and a memory layer that learns from its own runs. The …
DEVICE-grade Play Integrity through microG works if you flip one toggle that defaults to block. The keybox is a weekly rotation, and every banking app layers its own checks on top. Here is the minimum stack that holds …
Moving your only GPU into a Windows VM and back works. It also nukes your Plasma session every single time. I ran it as an experiment for months - here is the real cost and the layout that sidesteps the whole problem.
Describe a host as one block of YAML, run one playbook, get a configured server - and the same playbook does it to a whole fleet, the same way every time. The inventory says what a host should be; the AWX job log says …
A 6-node K3s cluster as one git repo. Push to master, ArgoCD picks it up, nothing gets deployed by hand. Three layers, sync waves, and the parts that took longest to get right.