Migrating a Fleet From SSH Passwords to Key-Only Auth Without Locking Anyone Out

Switching off SSH password auth before keys are proven is how you brick a fleet. The safe order: distribute keys, verify every login on every host, keep a break-glass path, then disable passwords last.

Process Design Before Tooling — Always

Automating a broken process makes the business bad at the process faster. This is one of the oldest observations in operations management, and technology teams rediscover it painfully, at real cost, every time a new tooling category makes automation newly tempting — which is, currently, constantly. I’ve written about the data model and the architectural …

Read more

Your Data Model Decides Whether Your CRM Works

Two organisations can buy the identical CRM platform, configured by equally competent implementation teams, and end up with wildly different results — because the platform was never the variable that actually determined success. The data model underneath it was, and almost nobody scrutinises that model with anything like the attention the platform selection itself receives. …

Read more