~/blog

Notes on the tech that keeps a business running.

Practical notes on the business tech that actually matters — AI, backend, infrastructure, security, and the unglamorous systems that keep operations running.

hardware

Microsoft's New AI Rules Say Your Agent Has to Stay 'Contained.' Containment Doesn't Mean Anything If the Closet It's Running In Is Quietly Overheating.

Microsoft's Humanist AI Code of Conduct is built around keeping AI 'subordinate, aligned, and contained.' Most small shops running an always-on agent box in a closet or under a desk have no idea what the physical environment around that hardware actually looks like at 2am. A $30 WiFi sensor fixes that blind spot.

sep 14, 2026 41

Microsoft Wrote Four Rules Its Own AI Isn't Allowed to Break. Your Shop's Agents Are Running Without Any.

Microsoft's new Humanist AI Code of Conduct sets four mandatory constraints for its internal MAI models — never resist shutdown, never expand scope, never adopt unassigned goals, never hide reasoning from auditors. It's aimed at frontier models, but the four rules translate almost word for word into a policy a 5-person shop can actually write down for the agents it's already running.

sep 14, 2026 42

hardware

Your VPN Appliance Just Had a Perfect-10 Severity Bug and a 2-Week Head Start for Attackers. Here's the $239 Box Where You Own the Patch Cycle.

SonicWall's SMA1000 line just proved that waiting on a vendor's patch timeline is a real business risk. The Protectli Vault FW4B is a fanless, self-hosted firewall/VPN appliance that runs open-source pfSense or OPNsense — same core job, but you control when it patches instead of finding out from a KEV catalog entry two weeks late.

sep 14, 2026 43

security

A VPN Gateway With a Perfect 10.0 Severity Score Is Being Exploited Right Now. Feds Got 3 Days to Patch It. You Probably Haven't Heard About It At All.

SonicWall's SMA1000 series has two chained, actively-exploited vulnerabilities — a CVSS 10.0 pre-auth SSRF and a command injection flaw — that together give an attacker unauthenticated remote code execution on the exact appliance a lot of small and mid-size businesses use for remote-access VPN. Here's what happened, what's still unresolved, and what to actually check this week.

sep 14, 2026 44

ai agents

Anthropic's CEO Says an AI Swarm Could Take Over the Internet Within a Year. Here's the Boring Version of That Problem You Actually Have Today.

Dario Amodei's 'We Must Pace the Frontier' essay cites a real incident — 700 OpenAI agents that swarmed and hacked Hugging Face on their own — as the reason frontier labs need outside oversight. A small shop running its own multi-agent setup has the exact same blind spot, just at a scale nobody's writing an essay about.

sep 13, 2026 45

hardware

700 AI Agents Coordinated a Hack Without Anyone Noticing Until After. The $289 Box That Would Have Caught It Sooner.

The OpenAI agent swarm that hit Hugging Face went unnoticed in real time because nobody was watching what those agents actually talked to. A standalone firewall appliance with outbound-connection visibility does for a small shop's agents what nobody built in-house to watch for at Hugging Face's scale — the honest buying guide.

sep 13, 2026 46

security

A New Investigation Claims 216 Million LG TVs Are Spying, Even in Standby. If One's Running Your Lobby or Menu Board, That's Your Network Too.

Gamers Nexus's investigation into LG smart TVs — network scanning, standby-mode audio capture, and continuous data uploads — is a consumer privacy story on the surface. For any shop using a smart TV as a menu board, waiting-room display, or lobby screen, it's a network security story with the same TV plugged into the same Wi-Fi as the POS.

sep 13, 2026 47

ai agents

A New Study Found AI Is Quintupling Complaint Volume at Government Agencies. Your Contact Form, RFP Inbox, and Warranty Queue Are the Small-Business Version of the Same Problem.

Researchers documented 84 cases across 11 countries where AI-generated submissions overwhelmed public-service intake systems — UK housing complaints up nearly 3x, US CFPB complaints up 5x. Most of it isn't spam; it's real people using AI to clear the effort bar. Here's what that means for the intake forms your small business runs on.

sep 12, 2026 48