Conditional Access Without the Marketing Language
A practical explanation of how Microsoft Entra Conditional Access evaluates signals, applies policy, and makes access decisions—and where its protection stops.
4 min read
Insights
Notes, ideas, and things worth exploring.
Writing about technology, systems, open source, privacy, AI, infrastructure, experiments, and whatever else seems worth understanding a little better.
Featured insight
Read the article
Archive
All insights
Showing 16 articles
AI Agent Security in 2026: Identity and Authorization Are the New Perimeter
Learn why AI agents create new identity, authorization, prompt-injection, and access-control risks—and how organizations can begin securing them.
- ai agents
- identity
- authorization
- prompt injection
- least privilege
Conditional Access Without the Marketing Language
A practical explanation of how Microsoft Entra Conditional Access evaluates signals, applies policy, and makes access decisions—and where its protection stops.
- conditional access
- entra id
- identity
- mfa
Li-Fi in 2026: Where Is the Technology Now?
An evidence-led look at optical wireless communication, IEEE standardization, practical constraints, hybrid Wi-Fi designs, and the niches where Li-Fi may matter.
- lifi
- optical wireless
- wifi
- ieee 802 11bb
Open-Weight AI: When Does Running Your Own Model Make Sense?
A decision framework for local and self-hosted AI that separates downloadable weights from open source and weighs privacy, control, cost, hardware, and operations.
- open weight ai
- local ai
- privacy
- ai operations
Microsoft Entra Passkeys: Preparing for the Move Away From SMS
Microsoft is making passkeys the default Entra authentication experience. Learn what changes, why SMS is being retired, and how IT teams should prepare.
- entra id
- passkeys
- fido2
- passwordless
- authentication
Post-Quantum Migration Starts With a Cryptographic Inventory
Post-quantum migration is no longer theoretical. Learn why cryptographic inventory, dependency discovery, and migration planning should begin now.
- post quantum
- cryptography
- crypto agility
- pki
- security
EU AI Act Transparency Rules: What Product Teams Need to Know
EU AI Act transparency obligations began applying in August 2026. Learn what developers and deployers should review for AI interaction and generated content.
- eu ai act
- ai transparency
- generative ai
- deepfakes
- regulation
AI Privacy in Canada: Lessons From the OpenAI and Grok Investigations
Canadian privacy regulators issued significant AI findings in 2026. Here are the practical lessons for products handling personal information.
- ai privacy
- canada
- personal information
- privacy by design
- generative ai
Raspberry Pi AI HAT+ 2: Where Local Generative AI Makes Sense
Raspberry Pi's AI HAT+ 2 brings local generative AI to Raspberry Pi 5. See where edge AI makes sense—and where cloud services still win.
- raspberry pi
- edge ai
- local ai
- hailo
- generative ai
WordPress 7.0 Performance: What Developers Should Actually Test
WordPress 7.0 continues Core performance and platform work. See what changed, what developers should test, and why site architecture still matters more.
- wordpress
- web performance
- php
- block editor
- core web vitals
After Li-Fi: What IEEE 802.11br Could Change
IEEE 802.11br is developing enhanced light communications beyond 802.11bb. Learn what its optical bands, WDM, and multi-link work could change.
- ieee 802 11br
- lifi
- optical wireless
- wifi
- networking
AI Model Licensing: What OpenMDW 1.1 Changes for Developers
AI model licensing is evolving. Learn what OpenMDW 1.1 addresses and why developers must distinguish downloadable weights from genuinely open AI.
- ai licensing
- openmdw
- open weights
- open source
- model governance
Post-Quantum Wi-Fi: What IEEE 802.11bt Is Trying to Protect
IEEE 802.11bt is developing post-quantum security for Wi-Fi. Learn what it targets in authentication, key establishment, and handshake protocols.
- ieee 802 11bt
- post quantum
- wifi security
- wlan
- cryptography
Docker or native ERPNext installation?
A practical decision framework for choosing between Docker and native Bench deployment in the ERPNext Developer Toolkit.
- erpnext
- docker
- linux
Understanding the services behind ERPNext
A clear introduction to the web, worker, queue, cache, database, scheduler, proxy, and persistent-data responsibilities in an ERPNext stack.
- erpnext
- frappe
- architecture
A staged approach to Ubuntu server hardening
Harden an Ubuntu server without losing sight of access, service verification, updates, logging, backup, and recovery.
- ubuntu
- security
- operations
No insights matched those filters.