Rotating WordPress salts as incident response: the step everyone skips

Close-up of a metal combination lock with rotating numeric dials — visual metaphor for rotating WordPress salts to a new secret combination (photo: Felix Moeller / Pexels)

You’ve cleaned the malware files, deleted the backdoor admin accounts, rotated everyone’s password. The site is fine, you’re fine. Three weeks later someone logs in with a session cookie they grabbed during the compromise window and creates a fresh admin …

Apple Shortcuts to rename + organize iCloud Drive screenshots automatically (the run-on-folder-change recipe)

MacBook Air on a wooden desk with macOS System Preferences open and a folder of files visible — photo by abdullah-bin-mubarak on Pexels

Your ~/Desktop has 437 files in it. Most of them are screenshots called Screenshot 2025-09-04 at 3.42.18 PM.png. You haven’t deleted them because some are useful (a tracking number, a UI bug, a recipe) but most aren’t, and you …

Borg vs Restic vs Kopia: a real benchmark on a 200 GB nightly backup over a 100 Mbps uplink

Western Digital 4TB hard drive seated in a desktop docking station — photo by Alphaen on Pexels

Every “best backup tool” comparison on the internet eventually devolves into a feature-matrix between Borg, Restic, and Kopia, and concludes with “they’re all good, pick one.” That’s true, technically, but it doesn’t help when you’re staring at a 200 GB …

PF firewall on macOS: writing a tiny pf.conf to block outbound traffic from one specific app and ignore everything else

You installed a beta of some app. It’s slow, the UI’s weird, and Activity Monitor shows it making outbound network calls every two seconds — telemetry probably, or analytics, or who-knows-what. You’d uninstall it but you actually need the app …