Personal blog by Brian Baldock on security, AI/ML infrastructure, and the lessons that come from building in the open.https://blog.brianbaldock.net/en-UShttps://blog.brianbaldock.net/posts/running-wan-2-2-on-a-dgx-spark/https://blog.brianbaldock.net/posts/running-wan-2-2-on-a-dgx-spark/Running Wan 2.2 image-to-video on a DGX Spark to make a hidden scene breathe: the undocumented Blackwell setup traps and the trick behind it.Mon, 29 Jun 2026 16:00:00 GMTwan-2-2dgx-sparkimage-to-videocomfyuiaigregatorhttps://blog.brianbaldock.net/posts/first-hours-with-fable-5/https://blog.brianbaldock.net/posts/first-hours-with-fable-5/Claude Fable 5 is the most capable model Anthropic has shipped. It also blocks legit security work and drops the zero-retention floor businesses chose it for.Wed, 10 Jun 2026 16:00:00 GMTfable-5claude-fable-5mythos-5ai-safetyfable-5-reviewhttps://blog.brianbaldock.net/posts/pack-your-ssid/https://blog.brianbaldock.net/posts/pack-your-ssid/A pocket travel router with an IPsec tunnel back to a network I control, broadcasting a trusted SSID that follows me into every hotel and airport.Thu, 04 Jun 2026 03:30:00 GMTnetworkinghomelabvpnopenwrtipsechttps://blog.brianbaldock.net/posts/first-hours-with-opus-4-8/https://blog.brianbaldock.net/posts/first-hours-with-opus-4-8/Claude Opus 4.8 is a sharpening, not a leap. Clear gains, more honesty, hundreds of parallel subagents, and what it all means for security teams.Thu, 28 May 2026 23:43:00 GMTopus-4-8claude-opus-4-8opus-4-8-reviewhttps://blog.brianbaldock.net/posts/opus-4-7-first-hours/https://blog.brianbaldock.net/posts/opus-4-7-first-hours/A hands-on first-hours review of Claude Opus 4.7. What moved, what broke, the token-cost gotchas, and why Anthropic is still holding Mythos back.Fri, 17 Apr 2026 01:37:26 GMTclaudeanthropicopus-4-7claude-opus-4-7claude-opus-4-7-featureshttps://blog.brianbaldock.net/posts/we-keep-making-ai-wear-an-org-chart/https://blog.brianbaldock.net/posts/we-keep-making-ai-wear-an-org-chart/A sharp take on why today’s AI agents feel wrong, and what a quieter, more persistent AI-native future could actually look like.Thu, 16 Apr 2026 05:39:19 GMTaiai-toolsai-futureaitrends2026ai-shapehttps://blog.brianbaldock.net/posts/learning-fine-tuning-on-nvidia-dgx-spark-part-2/https://blog.brianbaldock.net/posts/learning-fine-tuning-on-nvidia-dgx-spark-part-2/Troubleshoot Nvidia DGX Spark setup issues and improve your AI Workbench custom container with these step-by-step solutions for a usable environmentTue, 03 Feb 2026 06:01:51 GMTpytorchinferencefine-tuning-modelsdgxsparkhttps://blog.brianbaldock.net/posts/learning-fine-tuning-on-nvidia-dgx-spark-part-1/https://blog.brianbaldock.net/posts/learning-fine-tuning-on-nvidia-dgx-spark-part-1/Learn to set up NVIDIA AI Workbench on DGX Spark for fine-tuning modern AI models with a CUDA-enabled PyTorch environmentSat, 24 Jan 2026 05:38:21 GMTpytorchinferencefinetuningdgxsparkhttps://blog.brianbaldock.net/posts/python-version-control/https://blog.brianbaldock.net/posts/python-version-control/Managing multiple Python versions on Windows with pyenv-win and PowerShell, and the small setup that keeps my dev environment from fighting me.Tue, 02 Dec 2025 06:23:30 GMTpythonwindowspyenvpyenv-winhttps://blog.brianbaldock.net/posts/lightningcopilot-salesforce-meets-copilotstudio/https://blog.brianbaldock.net/posts/lightningcopilot-salesforce-meets-copilotstudio/Embedding a Microsoft Copilot Studio agent inside Salesforce Lightning (LWC) with full Entra ID SSO, MSAL auth, and a token flow that survives Locker.Wed, 29 Oct 2025 10:00:47 GMTsalesforcessolwccopilotstudioentra-idagentic-aicopilot-agentsentra-id-ssohttps://blog.brianbaldock.net/posts/when-ethical-ai-cites-ghosts/https://blog.brianbaldock.net/posts/when-ethical-ai-cites-ghosts/Report shows fake sources in ethical AI study; highlights AI hallucinations and the need to verify AI-generated contentFri, 19 Sep 2025 04:44:32 GMTaiethical-aihttps://blog.brianbaldock.net/posts/bite-sized-entra-id/https://blog.brianbaldock.net/posts/bite-sized-entra-id/Explore quick Microsoft Entra ID feature setup videos. Learn to deploy Internet Access, Token Protection, and more with step-by-step guidesMon, 15 Sep 2025 00:42:55 GMTpimidentity-managementmicrosoft-entra-identra-idprivileged-identity-managemententra-featuressecurity-service-edgehttps://blog.brianbaldock.net/posts/admin-guide-controlling-copilot-in-viva-engage/https://blog.brianbaldock.net/posts/admin-guide-controlling-copilot-in-viva-engage/Learn how to manage access policies for Copilot in Microsoft Viva Engage with this comprehensive admin guide and mini PowerShell moduleThu, 04 Sep 2025 15:40:47 GMTpowershellcopilotmicrosoft-vivaviva-engagem365-copilotmicrosoft-viva-engagehttps://blog.brianbaldock.net/posts/securescore/https://blog.brianbaldock.net/posts/securescore/Enhance security with Microsoft Secure Score: a prioritized checklist for continuous improvements in identity, devices, apps, and dataMon, 11 Aug 2025 21:17:36 GMTzero-trustzero-trust-securitymicrosoft-secure-scoresecurity-kitchenhttps://blog.brianbaldock.net/posts/recipe-designing-identity-for-agentic-ai/https://blog.brianbaldock.net/posts/recipe-designing-identity-for-agentic-ai/Learn best practices for secure identity management in agentic AI systems, ensuring accountability and zero trust in dynamic, scalable environmentsTue, 22 Jul 2025 03:56:22 GMTentra-idmcp-serveragentic-ai-developmentidentity-for-agentic-aiagentic-ai-identitysql-mcphttps://blog.brianbaldock.net/posts/a-better-defender/https://blog.brianbaldock.net/posts/a-better-defender/Learn how offensive security techniques can enhance your defensive skills by shifting your perspective and understanding attacker strategiesMon, 07 Jul 2025 21:37:39 GMThackingpentestingcybersecurity-1https://blog.brianbaldock.net/posts/mfa-beyond-push-notifications/https://blog.brianbaldock.net/posts/mfa-beyond-push-notifications/Explore MFA beyond push notifications to enhance security with phishing-resistant methods like FIDO2, Passkeys, and compliant device strategiesWed, 09 Apr 2025 00:42:21 GMTmfaentra-idmicrosoft-authenticator-apphttps://blog.brianbaldock.net/posts/making-it-simpler-1/https://blog.brianbaldock.net/posts/making-it-simpler-1/Discover a tool to simplify Microsoft 365 onboarding and configuration for IT admins and business owners. Watch the video to learn moreThu, 13 Mar 2025 13:28:03 GMTai-toolsmicrosoft-365setup-expertm365-deploymentdeploying-m365https://blog.brianbaldock.net/posts/leaveagripe/https://blog.brianbaldock.net/posts/leaveagripe/LeaveA.Gripe offers a limitless board for anonymous, unmoderated, text-only messages with no tracking or engagement metricsThu, 13 Mar 2025 02:22:18 GMTsocial-mediaanonymitypinupgripesgripingleave-a-gripehttps://blog.brianbaldock.net/posts/mde-proxies-2025/https://blog.brianbaldock.net/posts/mde-proxies-2025/In 2025, proxies remain essential for Microsoft Defender for Endpoint in restricted networks. Learn about MDE and proxies in 2025.Mon, 10 Mar 2025 21:32:07 GMTproxiesdefenderportalxdrdefender-for-endpointmdedisconnected-networkshttps://blog.brianbaldock.net/posts/defender-for-endpoint-and-the-internet/https://blog.brianbaldock.net/posts/defender-for-endpoint-and-the-internet/Explore the nuances of Defender for Endpoint's connectivity needs, encryption history, and the evolution of modern security protocolsFri, 14 Feb 2025 05:57:47 GMThttpsencryptiontlsvpndefender-for-endpointairgapmdethe-internetair-gapped-networksdisconnected-networkshttps://blog.brianbaldock.net/posts/deploying-local-ai-inference-with-vllm-and-chatui-in-docker/https://blog.brianbaldock.net/posts/deploying-local-ai-inference-with-vllm-and-chatui-in-docker/Learn how to deploy a self-hosted AI chatbot using vLLM and ChatUI in Docker with an NVIDIA GPU for local AI inferenceSat, 01 Feb 2025 03:57:50 GMTaidockerdebiandocker-composehomelablocal-llmvllmchatuihttps://blog.brianbaldock.net/posts/making-it-simpler/https://blog.brianbaldock.net/posts/making-it-simpler/Discover how Setup Expert simplifies Microsoft 365 onboarding for IT admins with a quick 2-minute video. Perfect for streamlining your setup processSat, 18 Jan 2025 15:32:18 GMTmicrosoft365setupexpertsetupcloudmicrosoftmicrosoft-365-setuphttps://blog.brianbaldock.net/posts/fabrikam-allcompany-broke/https://blog.brianbaldock.net/posts/fabrikam-allcompany-broke/Learn how a user influx overwhelmed Fabrikam's "All Company" group and the solution applied to handle cross-tenant sync effectivelyTue, 08 Oct 2024 04:00:00 GMTmicrosoft-entra-identra-idm365-adminall-company-groupmicrosoft-365-multi-tenant-organizationmicrosoft-cross-tenant-syncm365-cross-tenant-syncentra-id-cross-tenant-synccross-tenant-synchttps://blog.brianbaldock.net/posts/top-10-cybersecurity-blunders/https://blog.brianbaldock.net/posts/top-10-cybersecurity-blunders/Essential tips to avoid cybersecurity mistakes and protect your business from cyber threats. Enhance your security with these practical steps.Wed, 07 Aug 2024 05:07:12 GMTtop10cybersecurity-1security-blunderstop-10-cybersecurity-blundershttps://blog.brianbaldock.net/posts/cybersecurity-training-programs-empower-your-employees/https://blog.brianbaldock.net/posts/cybersecurity-training-programs-empower-your-employees/Cybersecurity training for SMBs is vital. Explore some tools to enhance security awareness and protect sensitive infoTue, 30 Jul 2024 03:19:55 GMTtrainingcybersecurity-1cybersecurityawarenesshttps://blog.brianbaldock.net/posts/how-small-and-medium-businesses-can-boost-cybersecurity/https://blog.brianbaldock.net/posts/how-small-and-medium-businesses-can-boost-cybersecurity/Boost SMB cybersecurity with MFA, Microsoft Defender, Microsoft 365, Entra ID, reverse proxies, and SOC providers. Protect without breaking the bankSun, 14 Jul 2024 05:49:45 GMTcybersecurity-1microsoft-defendermicrosoft-entra-idmdismbsmicrosoft-defender-for-office-365microsoft-defender-for-identitymdoentra-id-p2https://blog.brianbaldock.net/posts/microsoft-authenticator-on-windows-no-thank-you/https://blog.brianbaldock.net/posts/microsoft-authenticator-on-windows-no-thank-you/Use Windows Hello for Business for secure, compliant authentication instead of Microsoft Authenticator on Windows devicesWed, 22 May 2024 18:48:53 GMTwindowszerotrustzero-trust-securitymicrosoft-authenticator-apphttps://blog.brianbaldock.net/posts/win11arm-on-macos/https://blog.brianbaldock.net/posts/win11arm-on-macos/Optimize Win11 ARM64 on Apple Silicon using VMware Fusion: Guide for setup, VHDX to VMDK conversion, Homebrew, QEMU, and VMware Tools installationSun, 25 Feb 2024 14:53:12 GMTmacosarmwindows-11vmware-fusionwindows-11-armw11-arm64https://blog.brianbaldock.net/posts/ms-900-on-demand/https://blog.brianbaldock.net/posts/ms-900-on-demand/MS-900 Training: Boost Microsoft 365 skills, master Teams & Viva, enhance security, simplify compliance, optimize licensing.Tue, 30 Jan 2024 19:50:14 GMTm365ms-900-exam-questionsms-900-examm365-adminms-900-traininghttps://blog.brianbaldock.net/posts/ceebee-talks-tech/https://blog.brianbaldock.net/posts/ceebee-talks-tech/Meet CeeBee, your IT news podcast AI, providing engaging tech talks for hands-free drives. Stay informed and entertained on-the-go!Fri, 05 Jan 2024 05:42:28 GMTaichatgptchatgptplusgptscustom-gptcustom-gptshttps://blog.brianbaldock.net/posts/edge-profile-pro-tips/https://blog.brianbaldock.net/posts/edge-profile-pro-tips/Explore how to use Edge profiles for efficient Microsoft 365 tenant management in this easy-to-follow guide.Wed, 06 Dec 2023 22:04:51 GMTmicrosoft-edgemicrosoft-edge-profilesmicrosoft-365-tenant-administrationm365-adminhttps://blog.brianbaldock.net/posts/automating-upn-suffix-updates-in-active-directory/https://blog.brianbaldock.net/posts/automating-upn-suffix-updates-in-active-directory/New script to help automate the updating of UPN attributes for Active Directory when migrating to or enabling Microsoft 365/Entra ID.Sat, 04 Nov 2023 00:33:50 GMTpowershellpowershell-automationpowershell-scriptingupn-suffixupn-updateshttps://blog.brianbaldock.net/posts/unlock-a-secure-future/https://blog.brianbaldock.net/posts/unlock-a-secure-future/FIDO2 Passkeys are an innovative security solution that offer multiple benefitsWed, 18 Oct 2023 01:46:36 GMTinfosec-cjbi6apo9015yaywu2micx2eopasskeysdigital-securitysecure-futurefido2-passkeyshttps://blog.brianbaldock.net/posts/demystifying-the-magic-of-passkeys/https://blog.brianbaldock.net/posts/demystifying-the-magic-of-passkeys/<iframe src="https://www.linkedin.com/embed/feed/update/urn:li:share:7112491244802428929" height="1104" width="504"></iframe>Tue, 26 Sep 2023 17:53:13 GMTmicrosoftpasskeypasskeysmicrosoft-365https://blog.brianbaldock.net/posts/proxies-and-defender-for-endpoint/https://blog.brianbaldock.net/posts/proxies-and-defender-for-endpoint/For my inaugural blog article on my official blog, I wanted to share my previous three blog articles (published on Microsoft official blogs) covering an...Sun, 09 Jul 2023 16:58:24 GMTmde-defender-for-endpoint-microsoft-defender-xdr-microsoft-defender-for-endpoint-proxies-disconnected-environments