🔍 Reviews

Hands-on reviews and teardowns — real testing, real gotchas, honest verdicts (including "not fully evaluated yet" when that's the truth).

Qidi Plus 4 — An Out-of-the-Box Security Teardown

A capable, open Klipper printer that ships as a small end-of-life Linux server with a published default password and a trust-everything network posture — and exactly what to lock down before it joins your network.

3D PrintingSecurity

QIDI Studio — A Network Traffic Capture and Vulnerability Scan

What it actually contacts on the internet on every launch, verified by a packet capture scoped precisely to its own process ID — plus a real, currently unpatched CVE found in its bundled FFmpeg.

3D PrintingSecurity

Proxmox Backup Server — Reviewed After Months of Real Backups and Real Recoveries

What PBS gets right, a retention-policy setting that quietly deleted the one backup a real recovery needed, and why interrupting the wrong command is worse than a clean cancel.

Self-HostingBackups

DigitalOcean — Reviewed After Running Half a Dozen Real Droplets for Months

What's genuinely solid about DigitalOcean droplets, a recurring SSH reliability quirk never root-caused, and the real access-control primitive that matters more than a tunnel.

CloudSelf-Hosting

Kasm Workspaces — A Real Retrospective on Why We Walked Away

Three separate root causes behind the same recurring autoscaling bug, a real database mistake made fixing one of them, and an honest verdict on why the deployment was retired.

Self-HostingRetrospective

Proton Mail Bridge as a Homelab's Shared SMTP Relay — Reviewed

A genuine swap-thrashing incident, and a real LXC gotcha where a load-average reading turned out to belong to the host, not the container.

Self-HostingEmail

Immich as a Real Google/iCloud Photos Replacement — Reviewed

A login bug that silently breaks mobile access after account creation, and a near-miss where the migration itself almost cost 145GB of real family photos.

Self-HostingPhotos

Checkmk — Reviewed After Running It as a Real Homelab's Monitoring Backbone

What Checkmk gets right at real scale, and several sharp, non-obvious ways it can report "everything's fine" while something important — like whether anyone actually gets alerted — silently isn't.

Self-HostingMonitoring

Pi-hole — Reviewed Mid-Deployment on a Real Home Network

What Pi-hole actually buys you over a router's built-in content filtering, a real gotcha where the router silently intercepts DNS before Pi-hole ever sees it, and a health-check finding that changed how I trust a "working" container.

Self-HostingNetworking

Tangem Hardware Wallet — App Security Teardown

A static security teardown of the Tangem hardware wallet's Android app: decompiled, checked for TLS/crypto issues, and traced through its WalletConnect signing flow. No physical card in hand yet.

CryptoSecurity