SQN Sync in IMS AKA Was the Authentication Detail I Kept Missing
IMS AKA stopped looking like a simple password check once I traced the sequence number and resynchronization path.
authentication
Monitoring Secrets Without Monitoring Secret Values
A production-engineering deep dive into monitoring secrets without monitoring secret values, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.
A Sealed Secret Server Can Be Secure and Still Be Down
A production-engineering deep dive into a sealed secret server can be secure and still be down, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.
Why a SIP 401 Response Usually Did Not Mean the Call Failed
Digest authentication made much more sense once I saw 401 as part of a challenge-response exchange rather than a generic failure code.
Rate Limiting Is Not Authentication
The public machine API uses request throttling as abuse resistance while retaining Bearer validation as the real identity check.
Config Drift Is a Monitoring Signal
A production-engineering deep dive into config drift is a monitoring signal, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.
SSH, sudo, Authelia and Docker Errors as One Security Telemetry Plane
A production-engineering deep dive into ssh, sudo, authelia and docker errors as one security telemetry plane, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.
Clock Synchronization Is Part of the Authentication System
A correct TOTP secret can still fail when the verifier and authenticator disagree about time.
Authelia Authentication Failures Need Context, Not Panic
A two-factor login system naturally records failed credentials, expired sessions and rejected access, so any single failure is not automatically an attack.
Passkeys Are Cryptographically Simple Compared With Their UX State Machine
WebAuthn can prove possession of a scoped private key. The product still has to reason about synced credentials, discoverable accounts, conditional UI, recovery, re-registration, and what the browser chooses to show.
How I Exposed OpenBao Metrics Without Exposing OpenBao
A production-engineering deep dive into how i exposed openbao metrics without exposing openbao, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.