Impostor syndrome: kicking self-doubt to the curb
Recognizing and handling impostor syndrome in the moments it hits hardest, drawing on Aviv Ben-Yosef’s “The Tech Executive Operating System”, with techniques like asking yourself Socratic questions.
Posts
The unboring NIST SP 800-190
Practical, non-boring takeaways from NIST SP 800-190 for container security: image scanning and vulnerability management, controlled image provenance, least-privilege runtime restrictions, network segmentation, runtime threat detection, and host-OS hardening.
A convenient homelab SSH jumphost (without the drama)
Building a homelab SSH jumphost that lets you pick any server from a fuzzy-finder (fzf) menu by friendly name instead of memorizing IPs, including the select-host script, autoload on login, and SSH key management.
Too many tabs open? Why real multitasking is hard
Why real human multitasking is hard: unlike computers, we lack an internal “orchestrator” to queue tasks, so things fall through the cracks, and how to restore that orchestrator given our finite mental RAM.
Proxmox firewall layers in simple terms
A clear, visual explanation of the Proxmox VE firewall and its three layers (datacenter, node, and VM/container), how rules are matched in practice, and how to configure it on a single-node setup.
Before you lead: honest questions for aspiring managers
Three honest questions every individual contributor should answer before moving into engineering management: are you ready to work with people over computers, to let go of control, and to be driven by interruptions instead of a plan?
Managing time as an Engineering manager
What a day as an engineering manager actually looks like, where the time goes, the challenges of 2024, and the time-management framework from Aviv Ben-Yosef’s “The Tech Executive Operating System” that helped.
Passkeys – the future of secure authentication
What passkeys are and why they are more secure and convenient than passwords: how the public-key authentication works, its security and usability advantages, and a quick guide to start using passkeys on iPhone and Mac.
Say “yes” to SBOMs!
Why software bills of materials (SBOMs) matter for security teams, managers, and developers, how to win management buy-in, and a short hands-on demo generating an SBOM in a GitLab CI pipeline.
Getting it right: security awareness program on a budget
How to build a security-awareness program on a budget when the security team is new: getting leadership buy-in, defining the audience and topics, scheduling sessions, tracking attendance, and collecting feedback.