Journal / Ardeshir Daryani

News, experience and lessons learned

Conceptual service runbook showing diagnosis, recovery and escalation steps.

The runbook you need at three in the morning

A one-page service runbook template: purpose, dependencies, logs, health checks, recovery and escalation, without storing passwords in the document.

Read post →
Conceptual server beside five checklist cards and a post-restart verification path.

Five things to record before restarting a server

A concise restart checklist covering affected users, dependencies, active work, recovery access and a meaningful post-restart test.

Read post →
Conceptual server indicator alongside a user request path and application response check.

The server is up. Does the service actually work?

Go beyond ping with a real user scenario, an essential dependency check and an actionable alert. Define what a healthy service means.

Read post →
Conceptual clocks connected to a central time source, with one clock out of sync.

A few minutes of clock drift: how much trouble can it cause?

Check Windows domain time sources and synchronization before changing settings. Distinguish clock drift from a time-zone display issue.

Read post →
Conceptual file restore diagram with a separate destination, validation mark and clock.

Your backup is green. When did you last restore a file?

Test file recovery in a separate location, check content and permissions, and record the actual time needed to return a usable file.

Read post →
Conceptual router diagram showing the main connection, return path and protected configuration copy.

Before changing MikroTik, prepare your rollback

A short checklist for remote MikroTik changes: Backup versus Export, Safe Mode, emergency access and clear rollback criteria.

Read post →
Conceptual diagram of a user, DNS and an application with separate checkpoints.

Internet down or just a DNS problem?

A practical checklist to distinguish network, DNS and application failures before changing settings. Read the evidence and choose the next test.

Read post →
Concept illustration of vulnerability prioritization by exposure and business impact

Which vulnerability should we patch first? Severity alone is insufficient

Why is sorting vulnerabilities by base score insufficient? We examine exposure, service importance, EPSS and threat evidence when prioritizing remediation.

Read post →
Concept illustration of passkey authentication and controlled account recovery

Do we solve security by removing passwords?

Passkeys change sign-in, but account recovery and device management still matter. An analysis of fallback access, support processes and phased organizational migration.

Read post →
Concept comparison of a simple container deployment and an orchestration platform

Does your company actually need Kubernetes?

Kubernetes adoption alone is not a reason to choose it. We analyze operational costs, team capacity and actual requirements alongside simpler Docker Compose deployments.

Read post →
Concept illustration of restoring business services from isolated backups

We have backups. Why can recovery still fail after ransomware?

Why are backups alone insufficient to restore a business? An analysis of service dependencies, recovery testing and readiness, illustrated by a hypothetical ransomware scenario.

Read post →
Concept illustration of AI computing, energy and operating costs

If AI is inexpensive, why does its infrastructure cost so much?

AI costs extend beyond the price of a request. We examine energy, data, human review and maintenance when comparing local execution with APIs and accepted outcomes.

Read post →