Notes
Everything I publish lands here: write-ups of my own projects and, now and then, a long look at something I wanted to understand properly. I have no fixed plan for what goes on this page, and I expect it to change as it fills up.
It started in a gap between projects, when for once I had evenings to sit with questions I had been collecting for a while. Most of the answers already existed as code, in repositories and in a small lab at home, but not yet as text. These notes are where I write that text and close the project.
Some of the prose and some of the code here was written with AI tools, and every claim and number is checked against its source before it goes out. AI is also one of the projects: I am building an AI lab at home, and it will turn up here once there is something measured to say about it.
Rappaport2 of 3 parts
An open-source CVE triage pipeline that decides priority in plain code and lets a language model write only the summary. Part 1 is the tool and its first two weeks of lab data; part 2 times EPSS against CISA's list of exploited vulnerabilities.
Snowflake on a Raspberry Pi2 parts
A first-generation Raspberry Pi from 2012, relaying Tor traffic from a home connection as a Snowflake proxy since 20 October 2026. Part 1 is the hardened setup and its first week of traffic; part 2 counts the proxy's clients per country without keeping a single address.