Lives and works in Maribor, Slovenia
Notes from the workshop floor
Full-stack IoT, mostly in Elixir: the device at the edge, the cloud services behind it, security in the middle, and OTA updates that actually land. I came to it through cloud, microservices and SaaS — the last four years have been spent a lot closer to the hardware.
The interesting part of IoT is that it is one system pretending to be two. A gateway in a cabinet and a service in a datacentre have to agree about identity, about what is trusted, and about what is true when they have not spoken for a week. Most of the hard problems live in that gap rather than at either end of it.
So I work across the whole of it: the firmware and the Elixir on the device, the platform and the services it talks to, the security that has to hold at both ends and in between, and the update path — because a fleet you cannot safely update is a fleet you will eventually be afraid to touch.
That habit came from years of cloud, microservices and SaaS, where those questions are the entire job. For the last four years I have been following the same questions downwards, into gateways and embedded hardware — lately NXP i.MX8M and ST STM32MP1, before that other things. The architecture problems turn out to be the same ones, with far less room to be wrong about them.
Alongside all of it I teach — not as a main line of work, but consistently, for as long as I have been doing this. I live and work in Slovenia, and always have, mostly remotely for clients elsewhere.
Teaching
2 coursesPython za začetnike
4.5 weeks · 9 live sessions · 13.5 hours
Nine live sessions, twice a week, for people who have never written a line of code. We start with the environment and end with a working Flask application.
The whole course is built around one running example — a fictional café called Pri Pythonu — so that every new idea arrives attached to something that already exists rather than as an isolated exercise. Conditionals, loops, data structures, functions, files and errors, objects, JSON and APIs, then the web application, then a project of their own.
Python in uvod v podatkovni inženiring
9 weeks · 18 live sessions · 27 hours · max 15 people
The beginners' course, then five more weeks turning it towards real data work.
The second half is the part I find most useful to teach, because it is where programming stops being an exercise: reading data out of Excel and CSV, Pandas and Polars, talking to PostgreSQL and MSSQL, writing SQL that does the work rather than looping in Python, pulling data from APIs and scraping it when there is no API, visualising the result, and finally serving it back out with FastAPI.
Recent writing
all posts →Secure boot and a verified root filesystem on an STM32MP157F-DK2
Four links of an authenticated boot chain on an STM32MP157F-DK2 — ROM, TF-A, U-Boot FIT and dm-verity — built, signed, broken on purpose and put back, with the one-time-programmable fuses left completely blank the whole way through.
Driving the display on an STM32MP157F-DK2 with Elixir and Scenic
Getting a real, touchable user interface onto the DK2's 4-inch MIPI DSI panel from Elixir on Nerves, with no GPU — the display stack, host previewing, a drift-free timer, and the Scenic gotchas that compile cleanly and fail on the device.
Beyond mTLS: identity for a fleet of IoT devices
Certificates and mTLS are the easy part. The hard part is identity over a device's whole life: first enrolment, rotation, power loss mid-rotation, and a gateway that was offline for two years.
Compile-time Markdown in Phoenix, and why I reversed it
I built this blog to parse every post at compile time, wrote up why it was the right call, and then reversed it three weeks later. Both of my premises were false. Here is what replaced it, and how it keeps every property the compile-time version actually earned.