https://tyfsadik.org/ Defence technology, infrastructure builds, and hands-on IT labs by MD. Taki Yasir Faraji Sadik. en-ca Fri, 23 Oct 2026 04:43:27 +0000 https://tyfsadik.org/blog/labs/security/automated-soc-pipeline.html https://tyfsadik.org/blog/labs/security/automated-soc-pipeline.html Wazuh + TheHive + MISP SOAR pipeline with MITRE ATT&CK mapping and automated enrichment. Security Thu, 22 Oct 2026 19:58:11 -0400 https://tyfsadik.org/blog/labs/security/ad-threat-hunting.html https://tyfsadik.org/blog/labs/security/ad-threat-hunting.html Hunt Kerberoasting, Pass-the-Hash, and Golden Tickets with BloodHound, Sysmon, and Splunk. Security Thu, 22 Oct 2026 19:58:11 -0400 https://tyfsadik.org/blog/labs/security/python-ir-automation.html https://tyfsadik.org/blog/labs/security/python-ir-automation.html Automate endpoint isolation with Python, yara-python, nftables, and the Proxmox API. Security Thu, 22 Oct 2026 19:58:11 -0400 https://tyfsadik.org/blog/labs/security/zero-trust-hybrid-cloud.html https://tyfsadik.org/blog/labs/security/zero-trust-hybrid-cloud.html NIST SP 800-207 zero trust with SPIFFE/SPIRE, mTLS, and Cilium eBPF microsegmentation. Security Thu, 22 Oct 2026 19:58:11 -0400 https://tyfsadik.org/blog/labs/security/vuln-management-automation.html https://tyfsadik.org/blog/labs/security/vuln-management-automation.html OpenVAS/GVM, Ansible, and Jira automation across the scan-to-patch lifecycle. Security Thu, 22 Oct 2026 19:58:11 -0400 https://tyfsadik.org/blog/labs/security/iot-network-recon.html https://tyfsadik.org/blog/labs/security/iot-network-recon.html Map IoT attack surface with Nmap NSE, Masscan, Wireshark, and Shodan. Security Thu, 22 Oct 2026 19:58:11 -0400 https://tyfsadik.org/blog/labs/cloud-azure/cspm-azure-aws.html https://tyfsadik.org/blog/labs/cloud-azure/cspm-azure-aws.html Audit AWS and Azure against CIS benchmarks with Prowler, ScoutSuite, and Terraform. Cloud Thu, 22 Oct 2026 19:58:11 -0400 https://tyfsadik.org/blog/labs/security/firewall-configuration.html https://tyfsadik.org/blog/labs/security/firewall-configuration.html Configuring iptables and firewalld rules for host-based and network security. Security Thu, 22 Oct 2026 19:58:11 -0400 https://tyfsadik.org/blog/labs/containers-kubernetes/docker-fundamentals.html https://tyfsadik.org/blog/labs/containers-kubernetes/docker-fundamentals.html Core Docker concepts: images, containers, volumes, networking, and lifecycle management. Containers Thu, 22 Oct 2026 19:58:11 -0400 https://tyfsadik.org/work/defence/defence-hardware-program.html https://tyfsadik.org/work/defence/defence-hardware-program.html Eleven hands-on hardware builds across sky, water, and ground, each mapped to a stated Defence Drone Initiative or Army MINERVA requirement - full BOMs, prices, step-by-step build guides, and bench photos. Defence Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/defence/sky-passive-radar-node.html https://tyfsadik.org/work/defence/sky-passive-radar-node.html Receive-only passive radar on a KrakenSDR 5-channel coherent SDR: FM/TV broadcast reflections off aircraft, range-Doppler processing with pyAPRiL, scored against an RTL-SDR ADS-B ground-truth receiver. Defence Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/defence/water-passive-acoustic-vessel-monitor.html https://tyfsadik.org/work/defence/water-passive-acoustic-vessel-monitor.html Solar-powered hydrophone node classifying passing vessels from underwater sound, with an RTL-SDR AIS receiver as ground truth and a dock-to-recharge extension. Defence Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/defence/ground-seismic-perimeter-mesh.html https://tyfsadik.org/work/defence/ground-seismic-perimeter-mesh.html Solar 915 MHz LoRa mesh of ESP32 nodes with ADXL355 accelerometers and geophones, classifying vehicles vs footsteps vs wind at the edge and reporting signed detections. Defence Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/defence/gps-denied-navigation-rover.html https://tyfsadik.org/work/defence/gps-denied-navigation-rover.html ROS 2 rover fusing wheel odometry, BNO085 IMU, and 2D LiDAR with an Extended Kalman Filter; GNSS gets switched off and position drift is measured against a u-blox ground-truth track. Defence Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/defence/convoy-robots-degraded-mesh.html https://tyfsadik.org/work/defence/convoy-robots-degraded-mesh.html Two rovers convoy behind a lead vehicle over a 915 MHz LoRa / Wi-Fi mesh, hold formation through induced link drops, and recover on reconnect - the resupply-convoy DDIL problem at bench scale. Defence Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/defence/acoustic-drone-detector.html https://tyfsadik.org/work/defence/acoustic-drone-detector.html MEMS microphone array on a Raspberry Pi detecting rotor harmonics, rejecting birds and aircraft, and estimating direction of arrival by beamforming - emits nothing, only detects. Defence Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/defence/thermal-sar-drone.html https://tyfsadik.org/work/defence/thermal-sar-drone.html X500-class quadcopter with a FLIR Lepton thermal camera and Hailo AI HAT+ edge detection finding people in snow and brush, pushing georeferenced detections to a live map. Defence Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/defence/cold-soak-battery-rig.html https://tyfsadik.org/work/defence/cold-soak-battery-rig.html Heated, instrumented drone battery bay tested in a lab freezer and real Canadian winter - runtime, voltage sag, and failure modes logged against temperature as a published dataset. Defence Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/defence/secure-fleet-updates.html https://tyfsadik.org/work/defence/secure-fleet-updates.html Secure boot, TPM 2.0 measured boot, YubiKey-signed OTA updates, and automatic A/B rollback for the robot fleet - validated in a cold chamber and under power-cut chaos tests. Defence Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/defence/airspace-deconfliction-manager.html https://tyfsadik.org/work/defence/airspace-deconfliction-manager.html ESP32 tracker beacons plus ArduPilot SITL simulated drones, dynamic 3D geofences, predicted-conflict alerts, and a human-in-the-loop override for every resolution. Defence Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/defence/multi-domain-common-operating-picture.html https://tyfsadik.org/work/defence/multi-domain-common-operating-picture.html The fusion layer tying every sensor build together: signed detections over MQTT/Zenoh, store-and-forward through dead links, a Kalman-filter tracker fusing air, water, and ground tracks, and a human making every decision. Defence Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/defence/arctic-domain-awareness.html https://tyfsadik.org/work/defence/arctic-domain-awareness.html Streaming pipeline fusing open ADS-B aircraft data, AIS ship tracking, and Sentinel-1 radar imagery over Canada's North, flagging dark vessels and route deviations. Relevant to NORAD modernization and Arctic sovereignty. Defence Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/defence/ddil-proof-devops.html https://tyfsadik.org/work/defence/ddil-proof-devops.html CI/CD and telemetry that keep working through denied, degraded, intermittent, and limited links: store-and-forward, delta updates, signed artifacts, k3s edge nodes, chaos-tested with tc netem. Defence Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/defence/counter-drone-sensor-fusion.html https://tyfsadik.org/work/defence/counter-drone-sensor-fusion.html Synthetic radar, RF, acoustic, and camera tracks fused with Kalman filters, confidence scoring, and human-in-the-loop alert triage. Defensive, simulation only. Defence Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/defence/decision-black-box.html https://tyfsadik.org/work/defence/decision-black-box.html Tamper-evident audit layer for human-in-the-loop decisions: hash-chained signed append-only log, replay tool, and OPA policy-as-code checks. Defence Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/defence/zero-trust-air-gapped-supply-chain.html https://tyfsadik.org/work/defence/zero-trust-air-gapped-supply-chain.html SBOM, sigstore signing, and reproducible builds moved across a simulated one-way transfer into an offline registry, mapped to Canadian Centre for Cyber Security guidance. Defence Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/defence/lentus-drone-mapping.html https://tyfsadik.org/work/defence/lentus-drone-mapping.html Simulated drone flights mapping floods and wildfires, edge computer vision detecting affected areas, and a live situational-awareness map, with OR-Tools route optimization. Defence Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/infrastructure/homelab-server-room.html https://tyfsadik.org/work/infrastructure/homelab-server-room.html The cozy basement server room behind everything on this site: racked desktop and laptop Proxmox hosts, managed switching with VLAN trunking, wireless backhaul, power, and cooling. Infrastructure Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/infrastructure/kubernetes-infrastructure.html https://tyfsadik.org/work/infrastructure/kubernetes-infrastructure.html Production-grade multi-node K8s cluster across 7 machines with VLAN segmentation, Calico CNI, MetalLB, Longhorn storage, and Prometheus + Grafana observability. Infrastructure Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/infrastructure/tyf-ai-platform.html https://tyfsadik.org/work/infrastructure/tyf-ai-platform.html Hardened local AI inference: llama.cpp with CUDA, Open WebUI behind an authenticated Caddy proxy, per-model Firejail sandboxing, and GPU passthrough on Proxmox. Infrastructure Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/infrastructure/proxmox-zero-trust.html https://tyfsadik.org/work/infrastructure/proxmox-zero-trust.html 3-node Proxmox HA cluster with Ceph, VLAN segmentation, and zero public ingress via Cloudflare Tunnel with Tailscale fallback and automated ZFS snapshots. Infrastructure Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/infrastructure/data-sovereignty-stack.html https://tyfsadik.org/work/infrastructure/data-sovereignty-stack.html Self-hosted Nextcloud + Immich on BTRFS external SSDs with multi-user ACL isolation and a 3-2-1 offsite backup pipeline to BorgBase and rsync.net. Infrastructure Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/infrastructure/chakor.html https://tyfsadik.org/work/infrastructure/chakor.html Open-source AI workspace you run yourself. Local and cloud models, web search, document chat, model compare, notes, and memory - all private on your hardware. Infrastructure Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/infrastructure/private-ai-model.html https://tyfsadik.org/work/infrastructure/private-ai-model.html Self-hosted LLM with integrated web search at ai.tyfsadik.org. Full privacy, no cloud subscriptions. Infrastructure Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/infrastructure/proxmox-homelab.html https://tyfsadik.org/work/infrastructure/proxmox-homelab.html Full virtualization stack for testing servers, VMs, containers, and network configurations. Infrastructure Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/infrastructure/self-hosted-dns.html https://tyfsadik.org/work/infrastructure/self-hosted-dns.html Network-wide ad/tracker blocking with Pi-hole and recursive DNS resolution via Unbound. Infrastructure Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/infrastructure/email-server.html https://tyfsadik.org/work/infrastructure/email-server.html Self-hosted SMTP/IMAP with Postfix + Dovecot on custom domain @tyfsadik.org. Infrastructure Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/infrastructure/nextcloud-storage.html https://tyfsadik.org/work/infrastructure/nextcloud-storage.html Private Nextcloud instance replacing Google Drive. Syncs files across all devices. Infrastructure Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/infrastructure/photo-server.html https://tyfsadik.org/work/infrastructure/photo-server.html Personal photo management with ML face recognition and mobile auto-backup. Infrastructure Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/infrastructure/search-engine.html https://tyfsadik.org/work/infrastructure/search-engine.html Privacy-respecting search engine aggregating results from multiple sources without tracking. Infrastructure Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/infrastructure/wiki-server.html https://tyfsadik.org/work/infrastructure/wiki-server.html Full Wikipedia mirror accessible to users in countries with restricted internet access. Infrastructure Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/infrastructure/arch-linux-remote-desktop.html https://tyfsadik.org/work/infrastructure/arch-linux-remote-desktop.html Full Arch Linux + XFCE remote desktop via WSL2 - no router port forwarding required. Infrastructure Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/web-development/homebound-aisha.html https://tyfsadik.org/work/web-development/homebound-aisha.html Business website for a home-based service provider. Responsive, client-delivered. Web Dev Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/web-development/gta-high-glass.html https://tyfsadik.org/work/web-development/gta-high-glass.html Website for a glass and glazing company in the Greater Toronto Area. Web Dev Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/web-development/hakimi-fruits.html https://tyfsadik.org/work/web-development/hakimi-fruits.html Online presence for a fruit and produce business with product listings. Web Dev Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/web-development/faiaz-shisha.html https://tyfsadik.org/work/web-development/faiaz-shisha.html Multi-page website for a shisha lounge with flavour menu and booking info. Web Dev Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/web-development/pharmacy-website.html https://tyfsadik.org/work/web-development/pharmacy-website.html Medical/pharmacy website with product listings and service information. Web Dev Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/web-development/birthday-project.html https://tyfsadik.org/work/web-development/birthday-project.html Interactive birthday celebration page with CSS animations and JavaScript effects. Web Dev Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/web-development/practice-apps.html https://tyfsadik.org/work/web-development/practice-apps.html TypeScript and web development practice projects (app_2_kimi, heda1, heda2). Web Dev Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/games/depot-gato.html https://tyfsadik.org/work/games/depot-gato.html 2D tower defense game with wave spawning, placement mechanics, and pixel art assets. Games Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/applications/gatearch.html https://tyfsadik.org/work/applications/gatearch.html Student portal and admin system with course management and user authentication. Apps Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/applications/taxglobe.html https://tyfsadik.org/work/applications/taxglobe.html Web application for calculating taxes across different jurisdictions with clear breakdowns. Apps Thu, 22 Oct 2026 19:54:50 -0400 https://tyfsadik.org/work/applications/wonder-learning.html https://tyfsadik.org/work/applications/wonder-learning.html E-learning platform with course listings, video embeds, and educational interface. Apps Thu, 22 Oct 2026 19:54:50 -0400