After switching my Fedora laptop from GNOME to Hyprland, I started paying a bit more attention to what actually runs when I log in. Under GNOME, a lot of this was easy to forget about. With my new setup, I wanted to know which applications were starting with the session, which services were enabled,

I did not start this because I wanted a screenshot for /r/unixporn. I wanted to stop moving windows around manually. That was basically the entire plan. Four days later I have Hyprland, Waybar, Rofi, custom battery logic, a terminal file manager, several small helper scripts, a reproducible installer and documentation explaining

This playbook grew out of my own need for a practical Active Directory field guide that I could use during real penetration tests instead of relying on scattered notes, command collections and memory. Over time, I kept refining it around the way I actually work: establish what access and evidence I have, understand what each result proves,

A few days ago I built Onionservatory, because apparently Onion Services also deserve to be judged by automated security tools.

It answers questions like:

1
2

There are plenty of tools that will happily tell you that your normal website is terrible.

MDN HTTP Observatory will inspect your HTTP security configuration. SecurityHeaders will judge your headers.

This article could also have title: how we discovered automation for the fifteenth time, renamed it AI, panicked, bought six dashboards and forgot about the Windows 2008 server in the basement.

I’ve been running this blog for quite a while, and most of what I publish here is technical: guides, projects, reviews, vulnerabilities, things I

In the previous episode, I replaced Discord webhooks with Gotify.

That solved where my infrastructure notifications should go. It did not solve who was supposed to notice that a VPS was running out of disk space, waiting for a reboot or quietly collecting failed systemd units like

Because apparently I needed an app for changing app icons.

I have a growing collection of small tools that were originally created only for myself. Usually something annoys me just enough that I start thinking about automating it, and these days AI makes it dangerously easy to turn such thoughts into actual applications. A few years ago

Some time ago I wrote a small script for myself because I wanted an answer to one very simple question:

Did I accidentally do something stupid on this VPS?

Which, to be fair, is a question worth asking from time to time. I run different things on my servers. Websites, databases, Tor services, monitoring, random

For a long time I used Discord webhooks for notifications from my services. It was easy, it worked and almost every application knew how to send something to Discord. Create a private channel, copy a webhook URL, paste it into a service and wait until something breaks. Very advanced engineering.

The more services I added, however, the