braedach.com - Always Learning

Cybersecurity

South Korean Cybersecurity Issues

This is a real, well-documented wave, but it isn't a new class of exploit. The attacker found badly protected, internet-facing business apps, and AI tooling made the work faster. Confirmed facts * Shinhan, KB Kookmin, Hana, BNK Busan, Yegaram Savings Bank and Hyundai Capital were hit between

Interests

Towing in Australia

Its called research. Well now that is enlightening. A new plan is required. #enoughsaid

Cybersecurity

Why Every Container Scan Looks Terrible

(And What To Do About It) This post once again was the result of reading Brandon Lee. It was very enlightening and led to a redesign, the dropping of Portainer CE and a staggering amount of questions on container security management. Short answer A wall of Medium and High findings

Ubiquiti

UniFi Network Application 11

Is an update for Ubiquiti’s network management software released as an Early Access (EA) version. ⚠️ Critical Requirements & Breaking Changes * UniFi OS Requirement: It strictly requires UniFi OS 6.0 or newer. * USG Gateway Support Dropped: Support for legacy USG gateways has been entirely removed. Version 10.6 is

Interests

Australian public servants are waging war on official history of Afghanistan

There is something seriously wrong in this country on how we treat the men and women who are deployed to meet our Foreign Policy commitments, and the associated history that goes with it. Canberra is waging an insurgent war on our military historyAARON PATRICK: A three-year campaign by powerful

News

Accept ‘bad things’ in return for benefits

He didnt. He did. Accept ‘bad things’ in return for benefits of AI, says Sam AltmanBoss of OpenAI calls for a regulatory light touch because of the ‘good stuff’ the technology can deliverThe GuardianRobert Booth The chief executive of OpenAI cited hacks, scams and “other bad things that will happen”

Projects

Dockhand: A Security-Minded Docker Management UI Worth Your Attention

Replacing Pulse, and putting container updates and vulnerability scanning to the test I recently retired Pulse from my homelab monitoring stack and replaced it with Dockhand. Pulse did its job, but I wanted one tool that could show me what was running, keep it updated, and tell me when an

Projects

Zoraxy — Reverse Proxy

Updated 23 September 2026. This replaces the earlier version of this post: the security model has changed completely. The weekly forensic script has been demoted to reporting only, and blocking is now automatic via a plugin I wrote for Zoraxy. If you've spent any time self-hosting at

Cybersecurity

Cybersecurity hits shipping

Wow, as if its hard enough on land. US tracking cyberthreats against nearly 20 ships worldwideUS agencies are tracking cyberthreats targeting nearly 20 global shipping vessels to protect operations and prevent disruptions in maritime security. Read more at straitstimes.com.The Straits TimesThe Straits Times Warnings about cyberattacks targeting the

Interests

AI & my Hypervisor

A Year in the Trenches I've spent the past several years building out a self-hosted homelab — a Proxmox hypervisor running a fleet of LXC containers, a Podman-based application host, a reverse proxy fronting everything, and a Ubiquiti network tying it all together. It's the

News

Happy Father's Day

From my family to yours. Listen to some Spanish to get that soul moving. Music sooths the savage beast. There are other variations. Have a great day. #enoughsaid

Interests

NBN 2000 (Hyperfast) connections

Some time ago I took advantage of NBN Australia's free upgrade moving the residence off the FTTN to FTTP technology. I have noticed in the last few months that this is now hitting speeds with those adverstised by the ISP provider. Even on weekends it holds it own

Projects

Project - Spiderfoot

SpiderFoot is an open-source OSINT automation tool. Point it at a domain, IP, email address or username and it runs a chain of specialised modules against public sources and APIs — DNS records, subdomains, breach databases, Shodan, VirusTotal and so on — to build up a picture of a target'

Proxmox

Proxmox Hypervisor Planning

Another very good post by Brandon Lee 7 Proxmox Decisions That Are Painful to Change LaterHere are 7 decisions to make early around storage, networking, clustering, CPU types, backups, and infrastructure.Virtualization HowtoBrandon Lee A few other considerations * If you are going to use a LLM consider AMD based graphics

Cybersecurity

Australia's cyber experts called to serve

Are you an Australian citizen that has a little free time. This may be for you. No idea if it pays. https://www.defence.gov.au/news-events/releases/2026-08-21/australias-cyber-experts-called-serve Defence is seeking experienced cyber professionals to apply their skills in service of

Interests

New Horizons Heliospheric Science

The following post is taken from here Is a Sea Change Coming for New Horizons Heliospheric Science?If you visit the New Horizons mission website frequently, you’ll notice that the spacecraft continues to generate excellent science as it plows its way through the Kuiper Belt. It recently woke up

Cybersecurity

Linux IPv6 Kernel bug

The following post was taken from here OpenAI’s agents exploited a patched Linux bug in Hugging Face incident: 6 steps to take ASAP - ZDNETA patched Linux kernel vulnerability in the IPv6 network stack is drawing renewed attention after OpenAI’s agents exploited it.ZDNETSteven Vaughan-Nichols This is currently

Projects

Project - Swarm AI

The following project is based on this work GitHub - Armur-Ai/Pentest-Swarm-AI: Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go, Claude API, and 7+ native security

Interests

The IPv6 Penalty: Why Your ACME Certificates Are Quietly Failing in 2026

So damn frustrating. This post is generated from a session with Claude that took 4 hours. It took 4 hours because of a mistake by me, and the reason stated below. I was looking at the Zoraxy logs mainly looking for websocket misconfiguration. This ended up not being the major

Proxmox

Pulse - Infrastructure Management

I have been reading XDA and Brandon Lee again and I find this utility meantioned alot. After stuffing about for a while I decided to give it a run, and this is the result. Pulse Monitoring CE: What It's Actually Like to Run I'm deliberately not

Interests

The Commonwealth of Australia (AI Edition)

Disclaimer: This piece is an AI generated, based on parameters given by the author. It is not a political statement but the result of a genuine want by the author to understand what is happening based on science and facts, as determined by the AI which was given a broad

Interests

What's Really in the Price of Petrol

Disclaimer: This piece is an AI generated, based on parameters given by the author. It is not a political statement but the result of a genuine want by the author to understand what is happening based on science and facts, as determined by the AI which was given a broad

Interests

Organization of Turkic States

Goals, Ambitions, or a New Like-Minded Bloc? If you haven't heard of the Organization of Turkic States, you're not alone — it barely registers in Western news cycles. But over the last few years it's quietly become one of the more interesting experiments in

Ubiquiti

Ubiquiti & Starlink

OMG - awesome Not only does this remove middleman devices its works. I dont have a use case for this at this point in time, but its still awesome. Thankyou Ubiquiti and Starlink. #enoughsaid

Ubiquiti

STP Explained - Ubiquiti - Updated

So you are building a homelab or just want to host your own stuff, or maybe your just one of those guys or girls that want the internet ordering fridge, security cameras, app enabled garage, automatic lights, the mirror that tells you you daily routine and appointments. Hell, these days