Exploring infosec in my homelab.
Overview In our previous post about OpenVMS, we covered how to get OpenVMS running on Proxmox using the free Community License from VMS Software Inc. (VSI). This time, I wanted to explore running OpenVMS in Windows Subsystem for Linux (WSL). Technically, the "VMS-XDE" (Cross-Development Environment) is really just most of OpenVMS compiled to run on Linux. So, this will run on an x86-64 Linux e...
Overview In the olden days of computing it was a great sign of IT maturity if there was traditional Disaster Backup and Recovery (DBaR) and Business Continuity Planning (BCP). These concepts focused on preparing for and recovering from significant disruptions, such as natural disasters or major system failures. However, as cyber threats have evolved and become more sophisticated, the need for ...
If you work on more than one technology stack and/or if you have multiple team members working on one project, Dev Containers in VS Code can really help. Help what? Well, there are a few issues that are common: Environment Drift: Different developers have different versions of tools, libraries, or even operating systems. Onboarding Friction: New team members struggle to set up their local...
Overview I self-host a lot of little services - everything from Jellyfin, Pi-Hole, to Cyberchef to the occasional throwaway prototype. After years of tinkering, I've started to basically set them up the same way every single time. The pattern is: Purpose-built Ubuntu 24.04 VM with Docker installed (a VM in my ProxMox cluster) Docker Compose for whatever the service I want to run An unp...
1. Overview In modern day, cyber threats are becoming increasingly sophisticated, a reactive approach to security is no longer sufficient. We need to anticipate potential attacks and build defenses proactively. This is where threat modeling comes into play. Threat Modeling is a structured approach to identifying potential threats, vulnerabilities, and countermeasures early in the developme...