Blog
Notes from the terminal
Longer pieces on remote access — the protocols, the tooling, and what actually gets used on a working desk.
· 7 min read
SSH vs RDP: two protocols, one desk, and the case for a client that speaks both
Connecting to a machine you cannot touch is a routine part of running infrastructure. Two protocols carry most of that traffic — and in most teams they are used on the same afternoon by the same person.
· 7 min read
Session recording: what your logs are not telling you, and why admins end up wishing they had it
Your syslog records that a session opened and later closed. It has no vocabulary for what happened in between — which is the part every investigation turns out to need.
· 8 min read
Never hand over your RDP credentials: remote desktop, remote work, and the password you should never type twice
RDP was abused in 90% of the attacks one incident-response team handled in 2023 — and in most of them nothing was exploited. Someone simply logged in.