<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>kevinkulik.dev · Notes und Build Log</title><description>Untersuchungen und kurze, datierte Einträge zu Infrastruktur, Security, AI-Systemen und Migrationen.</description><link>https://kevinkulik.dev/</link><language>de-DE</language><item><title>Anatomy of a CVSS 10.0</title><link>https://kevinkulik.dev/en/notes/anatomy-of-a-cvss-10/</link><guid isPermaLink="true">https://kevinkulik.dev/en/notes/anatomy-of-a-cvss-10/</guid><description>A healthcare chatbot exposed credentials in its frontend. How I reviewed the delivered system, reported the finding, and verified the fix.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate><category>type:note</category><category>security</category><category>disclosure</category></item><item><title>NVMe-Totalausfall um 23:10: measure, then optimize</title><link>https://kevinkulik.dev/notes/nvme-ausfall-measure-then-optimize/</link><guid isPermaLink="true">https://kevinkulik.dev/notes/nvme-ausfall-measure-then-optimize/</guid><description>Eine NVMe flog aus dem ZFS-Mirror. Die Daten blieben da. Danach begann die eigentliche Arbeit mit Eingrenzung, Messung und gezielter Korrektur.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate><category>type:note</category><category>homelab</category><category>zfs</category><category>incident</category></item><item><title>Isolation follows data sensitivity: a three-tier doctrine</title><link>https://kevinkulik.dev/en/notes/three-tier-isolation/</link><guid isPermaLink="true">https://kevinkulik.dev/en/notes/three-tier-isolation/</guid><description>How I separate sensitive processing, public services, and static egress across three infrastructure tiers without exposing the private network.</description><pubDate>Sun, 16 Aug 2026 00:00:00 GMT</pubDate><category>type:note</category><category>infrastructure</category><category>security</category><category>architecture</category></item><item><title>Chat-Stack-Cutover: Mattermost und Matrix in private Production</title><link>https://kevinkulik.dev/#2026-08-13-chat-cutoverde</link><guid isPermaLink="true">https://kevinkulik.dev/#2026-08-13-chat-cutoverde</guid><description>Der private Chat-Stack ging ohne Föderation und öffentliches Routing produktiv. Was nicht erreichbar ist, muss nicht verteidigt werden.</description><pubDate>Thu, 13 Aug 2026 00:00:00 GMT</pubDate><category>type:log</category><category>homelab</category><category>chat</category></item><item><title>Agent-Baseline-Upgrade: erst Snapshot, dann Migration</title><link>https://kevinkulik.dev/#2026-08-09-agent-baselinede</link><guid isPermaLink="true">https://kevinkulik.dev/#2026-08-09-agent-baselinede</guid><description>Benannter Snapshot, vollständiges Backup, Migration, Abnahmetests. Die Reihenfolge ist der eigentliche Inhalt.</description><pubDate>Sun, 09 Aug 2026 00:00:00 GMT</pubDate><category>type:log</category><category>ai</category><category>homelab</category></item><item><title>Eine NVMe starb um 23:10. Den Mirror hat es nicht interessiert.</title><link>https://kevinkulik.dev/#2026-08-08-nvme-ausfallde</link><guid isPermaLink="true">https://kevinkulik.dev/#2026-08-08-nvme-ausfallde</guid><description>Der ZFS-Pool lief degradiert weiter, alle Gäste waren gesichert, und es gab keinen Datenverlust.</description><pubDate>Sat, 08 Aug 2026 00:00:00 GMT</pubDate><category>type:log</category><category>homelab</category><category>zfs</category></item></channel></rss>